Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,170)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-44269 2Fedoraproject Wavpack 2Fedora Wavpack Jun 17, 2026 Mar 10, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read be...Show more An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.Show less
CVE-2021-40050 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Mar 10, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.
CVE-2021-34342 2Fedoraproject Libming 2Fedora Ming Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak.
CVE-2021-34341 2Fedoraproject Libming 2Fedora Ming Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and leads to denial of service.
CVE-2021-34340 2Fedoraproject Libming 2Fedora Ming Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVE-2021-34339 2Fedoraproject Libming 2Fedora Ming Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVE-2021-34338 2Fedoraproject Libming 2Fedora Ming Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVE-2021-33293 2Debian Libpano13 Project 2Debian Linux Libpano13 Jun 17, 2026 Mar 10, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.
CVE-2021-32436 3Abcm2ps Project DebianFedoraproject 3Abcm2ps Debian LinuxFedora Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVE-2021-32434 3Abcm2ps Project DebianFedoraproject 3Abcm2ps Debian LinuxFedora Jun 17, 2026 Mar 10, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c.
CVE-2021-3743 4Fedoraproject LinuxNetapp+1 more 13Communications Cloud Native Core Binding Support Function Communications Cloud Native Core Network Exposure FunctionCommunications Cloud Native Core Policy+10 more Jun 17, 2026 Mar 4, 2022 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash...Show more An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.Show less
CVE-2021-45864 1Tsmuxer Project 1Tsmuxer Jun 17, 2026 Mar 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 tsMuxer git-c6a0277 was discovered to contain a segmentation fault via DTSStreamReader::findFrame in dtsStreamReader.cpp.
CVE-2021-44962 1Slic3r 1Libslic3r Jun 17, 2026 Mar 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can pro...Show more An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-21209 1Fatek 1Fvdesigner Jun 17, 2026 Feb 25, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.
CVE-2021-3610 3Fedoraproject ImagemagickRedhat 3Enterprise Linux FedoraImagemagick Jun 17, 2026 Feb 24, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to...Show more A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.Show less
CVE-2022-0717 1Mruby 1Mruby Jun 17, 2026 Feb 23, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
CVE-2021-44142 6Canonical DebianFedoraproject+3 more 23Codeready Linux Builder Debian LinuxDiskstation Manager+20 more Jun 17, 2026 Feb 21, 2022 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4...Show more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.Show less
CVE-2022-0630 1Mruby 1Mruby Jun 17, 2026 Feb 19, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2022-23645 3Fedoraproject RedhatSwtpm Project 3Enterprise Linux FedoraSwtpm Jun 17, 2026 Feb 18, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state,...Show more swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3, v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds.Show less
CVE-2022-24971 1Foxit 2Pdf Editor Pdf Reader Jun 17, 2026 Feb 18, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a...Show more This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15812.Show less

Previous 1...252253254...459 Next