Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,172)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-0396 1Zephyrproject 1Zephyr Jun 17, 2026 Jan 25, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses.
CVE-2023-22485 1Github 1Cmark Gfm Jun 17, 2026 Jan 24, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` f...Show more cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, because the out-of-bounds read accesses `malloc` metadata without causing any visible damage.This vulnerability has been patched in 0.29.0.gfm.7.Show less
CVE-2023-21614 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Jan 18, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...Show more Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21613 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Jan 18, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...Show more Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21585 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Jan 18, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...Show more Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21581 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Jan 18, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...Show more Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21603 1Adobe 1Dimension Jun 17, 2026 Jan 18, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-47881 1Foxit 2Pdf Editor Pdf Reader Jun 17, 2026 Jan 18, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.
CVE-2022-47630 2Arm Trustedfirmware 2Trusted Firmware A Trusted Firmware A Jun 17, 2026 Jan 16, 2023 N/A· v4 7.4 HIGH· v3 N/A· v2 Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side ef...Show more Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.Show less
CVE-2023-21599 1Adobe 1Incopy Jun 17, 2026 Jan 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...Show more Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21592 1Adobe 1Indesign Jun 17, 2026 Jan 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...Show more Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21591 1Adobe 1Indesign Jun 17, 2026 Jan 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...Show more Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-46768 1Amd 2Milanpi Firmware Romepi Firmware Jun 17, 2026 Jan 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.
CVE-2023-21776 1Microsoft 10Windows 10 Windows 11Windows 7+7 more Jun 17, 2026 Jan 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability
CVE-2023-21772 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21741 1Microsoft 4365 Apps OfficeOffice Long Term Servicing Channel+1 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Microsoft Office Visio Information Disclosure Vulnerability
CVE-2023-21682 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
CVE-2023-21539 1Microsoft 6Windows 10 20h2 Windows 10 21h2Windows 10 22h2+3 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Authentication Remote Code Execution Vulnerability
CVE-2023-21536 1Microsoft 8Windows 10 1809 Windows 10 20h2Windows 10 21h2+5 more Jun 17, 2026 Jan 10, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Event Tracing for Windows Information Disclosure Vulnerability
CVE-2022-4338 2Debian Openvswitch 2Debian Linux Openvswitch Jun 17, 2026 Jan 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Previous 1...215216217...459 Next