Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,628)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-38526 1Siemens 2Parasolid Teamcenter Visualization Jun 17, 2026 Aug 8, 2023 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V1...Show more A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-38525 1Siemens 2Parasolid Teamcenter Visualization Jun 17, 2026 Aug 8, 2023 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V1...Show more A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-30796 1Siemens 2Jt Open Toolkit Jt Utilities Jun 17, 2026 Aug 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contain an out of bounds read past the end of an allocated structure while parsing spe...Show more A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-30795 1Siemens 3Jt Open Jt UtilitiesParasolid Jun 17, 2026 Aug 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All ver...Show more A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-28555 1Qualcomm 71Ar8035 Firmware Mdm9628 FirmwareQam8295p Firmware+68 more Jun 17, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in Audio while remapping channel buffer in media codec decoding.
CVE-2023-21625 1Qualcomm 46Apq8009 Firmware Apq8017 FirmwareApq8037 Firmware+43 more Jun 17, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2023-20818 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540.Show less
CVE-2023-20813 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549.Show less
CVE-2023-20798 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for e...Show more In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.Show less
CVE-2022-47351 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-47350 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-4135 2Fedoraproject Qemu 2Fedora Qemu Jun 17, 2026 Aug 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data...Show more A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.Show less
CVE-2023-25600 1Insyde 1Insydecrpkg Jun 17, 2026 Aug 3, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.
CVE-2023-38746 1Omron 1Cx Programmer Jun 17, 2026 Aug 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execu...Show more Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.Show less
CVE-2023-4072 1Google 1Chrome Jun 17, 2026 Aug 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-33383 1Shelly 1Pro 4pm Firmware Jun 17, 2026 Aug 2, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload.
CVE-2023-38559 4Artifex DebianFedoraproject+1 more 4Debian Linux Enterprise LinuxFedora+1 more Jun 23, 2026 Aug 1, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with...Show more A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.Show less
CVE-2023-4048 2Debian Mozilla 2Debian Linux Firefox Jun 17, 2026 Aug 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
CVE-2023-34359 1Asus 1Rt Ax88u Firmware Jun 17, 2026 Jul 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of...Show more ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.Show less
CVE-2023-34358 1Asus 1Rt Ax88u Firmware Jun 17, 2026 Jul 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a st...Show more ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition.Show less

Previous 1...257258259...532 Next