Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,172)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-47943 1Linux 1Linux Kernel Jun 17, 2026 Dec 23, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.
CVE-2022-47940 1Linux 1Linux Kernel Jun 17, 2026 Dec 23, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.
CVE-2022-47938 1Linux 1Linux Kernel Jun 17, 2026 Dec 23, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.
CVE-2022-23547 1Pjsip 1Pjsip Jun 17, 2026 Dec 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possi...Show more PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as commit in the master branch.Show less
CVE-2022-43596 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An atta...Show more An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.Show less
CVE-2022-43592 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can pro...Show more An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.Show less
CVE-2022-41988 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive informa...Show more An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41981 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to a...Show more A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41977 1Openimageio 1Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a...Show more An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41684 1Openimageio 1Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory...Show more A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41649 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensi...Show more A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-46872 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 8.6 HIGH· v3 N/A· v2 An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>This bug only affects Thunderbird for Linux. Other operating systems...Show more An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.Show less
CVE-2022-3266 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.
CVE-2022-31747 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and w...Show more Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.Show less
CVE-2022-28285 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vu...Show more When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.Show less
CVE-2022-22742 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird...Show more When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.Show less
CVE-2022-46320 1Huawei 2Emui Harmonyos Jun 17, 2026 Dec 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.
CVE-2022-46317 1Huawei 2Emui Harmonyos Jun 17, 2026 Dec 20, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-23537 2Debian Teluu 2Debian Linux Pjsip Jun 17, 2026 Dec 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a speciall...Show more PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as a commit in the master branch (2.13.1).Show less
CVE-2022-44940 1Patchelf Project 1Patchelf Jun 17, 2026 Dec 19, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.

Previous 1...218219220...459 Next