Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,625)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-35629 1Microsoft 3Windows 10 1507 Windows Server 2008Windows Server 2012 Jun 17, 2026 Dec 12, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
CVE-2023-42886 1Apple 1Macos Jun 17, 2026 Dec 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrar...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.Show less
CVE-2023-6610 2Linux Redhat 2Enterprise Linux Linux Kernel Nov 5, 2026 Dec 8, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
CVE-2023-6606 2Linux Redhat 5Enterprise Linux Enterprise Linux EusEnterprise Linux Server Aus+2 more Nov 5, 2026 Dec 8, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
CVE-2023-48422 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...Show more In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-48415 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction...Show more In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-48413 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not n...Show more In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-48411 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware c...Show more In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.Show less
CVE-2023-48410 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not...Show more In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-48408 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise requir...Show more In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.Show less
CVE-2023-48404 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executio...Show more In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-48401 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. Use...Show more In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-48399 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise...Show more In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.Show less
CVE-2023-48398 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firm...Show more In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.Show less
CVE-2023-48397 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not...Show more In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-33098 1Qualcomm 257315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+254 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVE-2023-33097 1Qualcomm 121Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+118 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing a FTMR frame.
CVE-2023-33081 1Qualcomm 148Aqt1000 Firmware Ar8035 FirmwareCsr8811 Firmware+145 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
CVE-2023-33080 1Qualcomm 365315 5g Iot Modem Firmware 8098 Firmware8998 Firmware+362 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-49285 1Squid Cache 1Squid Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid...Show more Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less

Previous 1...242243244...532 Next