Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,628)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34145 1Qualcomm 94Csr8811 Firmware Ipq5010 FirmwareIpq5018 Firmware+91 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN Host while parsing frame information.
CVE-2022-33306 1Qualcomm 131Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+128 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.
CVE-2022-33271 1Qualcomm 245Apq8096au Firmware Aqt1000 FirmwareAr8031 Firmware+242 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33229 1Qualcomm 21Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+18 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
CVE-2022-33221 1Qualcomm 14Sd 8 Gen1 5g Firmware Ssg2115p FirmwareSsg2125p Firmware+11 more Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVE-2022-25738 1Qualcomm 35Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+32 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to buffer over-red while performing checksum of packet received
CVE-2022-25732 1Qualcomm 33Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+30 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to buffer over read in dns client due to missing length check
CVE-2022-25728 1Qualcomm 34Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+31 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to buffer over-read while processing response from DNS server
CVE-2023-21430 1Samsung 1Android Jun 17, 2026 Feb 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault.
CVE-2022-48293 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-48292 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2023-0698 1Google 1Chrome Oct 28, 2026 Feb 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2023-20609 1Google 1Android Jun 17, 2026 Feb 6, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570864; Issue ID: ALPS07570864.Show less
CVE-2023-20606 1Google 1Android Jun 17, 2026 Feb 6, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571104; Issue ID: ALPS07571104.Show less
CVE-2022-32595 1Google 1Android Jun 17, 2026 Feb 6, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitati...Show more In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236.Show less
CVE-2023-23933 1Amazon 1Opensearch Jun 17, 2026 Feb 3, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users wit...Show more OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detector role can read aggregated numerical data (e.g. averages, sums) of fields that are otherwise restricted to them. This issue only affects authenticated users who were previously granted read access to the indexes containing the restricted fields. This issue has been patched in versions 1.3.8 and 2.6.0. There are no known workarounds for this issue.Show less
CVE-2023-24977 1Apache 1Inlong Jun 17, 2026 Feb 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick http...Show more Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214 to solve it. Show less
CVE-2022-39061 1Changingtec 1Megaservisignadapter Jun 17, 2026 Jan 31, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access parti...Show more ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive content in memory and disrupts partial services.Show less
CVE-2022-40136 1Lenovo 147Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 3 07iab7 Firmware+144 more Jun 17, 2026 Jan 30, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
CVE-2022-40135 1Lenovo 136Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 3 07iab7 Firmware+133 more Jun 17, 2026 Jan 30, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Previous 1...285286287...532 Next