Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,171)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-22231 1Adobe 1Bridge Jun 17, 2026 Feb 17, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...Show more Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21620 1Adobe 1Framemaker Jun 17, 2026 Feb 17, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mi...Show more FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21583 1Adobe 1Bridge Jun 17, 2026 Feb 17, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...Show more Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21578 1Adobe 1Photoshop Jun 17, 2026 Feb 17, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mi...Show more Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21577 1Adobe 1Photoshop Jun 17, 2026 Feb 17, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mi...Show more Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-35729 1Openbmc Project 1Openbmc Jun 17, 2026 Feb 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.
CVE-2022-34864 1Intel 1Trace Analyzer And Collector Jun 17, 2026 Feb 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-34346 1Intel 1Media Software Development Kit Jun 17, 2026 Feb 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-30531 1Intel 1Iris Xe Max Dedicated Graphics Jun 17, 2026 Feb 16, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access.
CVE-2022-30339 1Intel 1Integrated Sensor Solution Jun 17, 2026 Feb 16, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access.
CVE-2023-21819 1Microsoft 7Windows 10 1809 Windows 10 20h2Windows 10 21h2+4 more Jun 17, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Secure Channel Denial of Service Vulnerability
CVE-2023-21798 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21714 1Microsoft 2365 Apps Office Long Term Servicing Channel Jun 17, 2026 Feb 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Microsoft Office Information Disclosure Vulnerability
CVE-2023-21702 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21699 1Microsoft 10Windows 10 Windows 10 1607Windows 10 1809+7 more Jun 17, 2026 Feb 14, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-21693 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-21691 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
CVE-2023-21687 1Microsoft 3Windows 11 21h2 Windows 11 22h2Windows Server 2022 Jun 17, 2026 Feb 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 HTTP.sys Information Disclosure Vulnerability
CVE-2023-25567 1Gss Ntlmssp Project 1Gss Ntlmssp Jun 17, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked pro...Show more GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an out-of-bound read. The out-of-bounds read can be triggered via the main `gss_accept_sec_context` entry point and could cause a denial-of-service if the memory is unmapped. The issue is fixed in version 1.2.0.Show less
CVE-2023-25563 1Gss Ntlmssp Project 1Gss Ntlmssp Jun 17, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit intege...Show more GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads.Show less

Previous 1...210211212...459 Next