Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,625)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-23441 1Hihonor 1Magic Ui Jun 17, 2026 Dec 29, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
CVE-2023-52152 1Cybergarage 1Mupnp For C Jun 17, 2026 Dec 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain host length recalculation.
CVE-2023-51713 1Proftpd 1Proftpd Jun 17, 2026 Dec 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
CVE-2023-6315 1Panasonic 1Fpwin Pro Jun 17, 2026 Dec 19, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file.
CVE-2023-4020 1Silabs 1Gecko Software Development Kit Jun 17, 2026 Dec 15, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from...Show more An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.Show less
CVE-2023-48638 1Adobe 1Substance 3d Designer Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...Show more Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-48637 1Adobe 1Substance 3d Designer Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...Show more Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-48636 1Adobe 1Substance 3d Designer Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...Show more Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-48635 1Adobe 1After Effects Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil...Show more Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47081 1Adobe 1Substance 3d Stager Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47080 1Adobe 1Substance 3d Stager Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47079 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47078 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47062 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47061 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47077 1Adobe 1Indesign Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...Show more Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47074 1Adobe 1Illustrator Jun 17, 2026 Dec 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory struc...Show more Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-6377 4Debian RedhatTigervnc+1 more 5Debian Linux Enterprise Linux EusTigervnc+2 more Nov 4, 2026 Dec 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possibl...Show more A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.Show less
CVE-2023-36696 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jun 17, 2026 Dec 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-35635 1Microsoft 2Windows 11 22h2 Windows 11 23h2 Jun 17, 2026 Dec 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Denial of Service Vulnerability

Previous 1...241242243...532 Next