Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,170)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-26280 2Fedoraproject Libarchive 2Fedora Libarchive Jun 17, 2026 Mar 28, 2022 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
CVE-2022-1056 2Libtiff Netapp 2Active Iq Unified Manager Libtiff Jun 17, 2026 Mar 28, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.
CVE-2022-27942 2Broadcom Fedoraproject 2Fedora Tcpreplay Jun 17, 2026 Mar 26, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
CVE-2022-27941 2Broadcom Fedoraproject 2Fedora Tcpreplay Jun 17, 2026 Mar 26, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
CVE-2022-27940 2Broadcom Fedoraproject 2Fedora Tcpreplay Jun 17, 2026 Mar 26, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
CVE-2021-44768 1Deltaww 1Cncsoft Screeneditor Jun 17, 2026 Mar 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.
CVE-2021-3422 1Splunk 1Splunk Jun 17, 2026 Mar 25, 2022 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk...Show more The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk Enterprise versions before 7.3.9, 8.0 versions before 8.0.9, and 8.1 versions before 8.1.3. It does not impact Universal Forwarders. When Splunk forwarding is secured using TLS or a Token, the attack requires compromising the certificate or token, or both. Implementation of either or both reduces the severity to Medium.Show less
CVE-2021-4156 2Debian Libsndfile Project 2Debian Linux Libsndfile Jun 17, 2026 Mar 23, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfil...Show more An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.Show less
CVE-2022-27607 1Axiosys 1Bento4 Jun 17, 2026 Mar 21, 2022 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531.
CVE-2022-22664 1Apple 3Garageband Logic Pro XMacos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application te...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2022-22627 1Apple 2Mac Os X Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
CVE-2022-22626 1Apple 2Mac Os X Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
CVE-2022-22625 1Apple 2Mac Os X Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
CVE-2022-22611 1Apple 6Ipados Iphone OsItunes+3 more Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously craft...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.Show less
CVE-2022-22608 1Apple 1Xcode Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVE-2022-22607 1Apple 1Xcode Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVE-2022-22606 1Apple 1Xcode Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVE-2022-22605 1Apple 1Xcode Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVE-2022-22604 1Apple 1Xcode Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVE-2022-22603 1Apple 1Xcode Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Previous 1...250251252...459 Next