Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,172)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-20123 1Google 1Android Jun 17, 2026 Jun 15, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. U...Show more In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221852424Show less
CVE-2022-22083 1Qualcomm 151Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+148 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn...Show more Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22065 1Qualcomm 167Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+164 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdrag...Show more Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22064 1Qualcomm 162Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+159 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapd...Show more Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35119 1Qualcomm 83Aqt1000 Firmware Ar8035 FirmwareCsrb31024 Firmware+80 more Jun 17, 2026 Jun 14, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobi...Show more Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-35100 1Qualcomm 120Apq8009w Firmware Apq8017 FirmwareApq8064au Firmware+117 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...Show more Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35086 1Qualcomm 55Ar8035 Firmware Qca6390 FirmwareQca6391 Firmware+52 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobi...Show more Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-35085 1Qualcomm 70Aqt1000 Firmware Ar8035 FirmwareCsrb31024 Firmware+67 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35084 1Qualcomm 92Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+89 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IO...Show more Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2021-35083 1Qualcomm 174Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+171 more Jun 17, 2026 Jun 14, 2022 N/A· v4 9.1 CRITICAL· v3 9.4 HIGH· v2 Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...Show more Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35071 1Qualcomm 171Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+168 more Jun 17, 2026 Jun 14, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indus...Show more Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2022-29506 1Fujielectric 2V Server V Sft Jun 17, 2026 Jun 14, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a use...Show more Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.Show less
CVE-2021-46814 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Jun 13, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31045 1Istio 1Istio Jun 17, 2026 Jun 9, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior...Show more Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress Gateway exposed to external traffic. This vulnerability has been resolved in versions 1.12.8, 1.13.5, and 1.14.1. Users are advised to upgrade. There are no known workarounds for this issue.Show less
CVE-2022-30702 1Trendmicro 1Security Jun 17, 2026 Jun 9, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Trend Micro Security 2022 and 2021 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to disclose sensitive information on an affected machine.
CVE-2022-28330 1Apache 1Http Server Jun 17, 2026 Jun 9, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.
CVE-2020-14125 1Mi 1Miui Jun 17, 2026 Jun 8, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.
CVE-2022-21756 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit...Show more In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535950; Issue ID: ALPS06535950.Show less
CVE-2022-21755 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit...Show more In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545464; Issue ID: ALPS06545464.Show less
CVE-2022-21747 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478078; Issue ID: ALPS06478078.Show less

Previous 1...241242243...459 Next