Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,628)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-46741 1Paddlepaddle 1Paddlepaddle Jun 17, 2026 Dec 7, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
CVE-2022-41910 1Google 1Tensorflow Jun 17, 2026 Dec 6, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes...Show more TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We have patched the issue in GitHub commit a65411a1d69edfb16b25907ffb8f73556ce36bb7. The fix will be included in TensorFlow 2.11.0. We will also cherrypick this commit on TensorFlow 2.8.4, 2.9.3, and 2.10.1.Show less
CVE-2022-41902 1Google 1Tensorflow Jun 17, 2026 Dec 6, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes...Show more TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We have patched the issue in GitHub commit a65411a1d69edfb16b25907ffb8f73556ce36bb7. The fix will be included in TensorFlow 2.11.0. We will also cherrypick this commit on TensorFlow 2.8.4, 2.9.3, and 2.10.1.Show less
CVE-2022-42781 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42780 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42779 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42774 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42773 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42769 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42768 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42762 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42761 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42759 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42758 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42757 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-39130 1Google 1Android Jun 17, 2026 Dec 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-35260 4Apple HaxxNetapp+1 more 8Clustered Data Ontap CurlH300s Firmware+5 more Oct 14, 2026 Dec 5, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the...Show more curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.Show less
CVE-2022-23467 1Openrazer Project 1Openrazer Jun 17, 2026 Dec 5, 2022 N/A· v4 4.6 MEDIUM· v3 N/A· v2 OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stag...Show more OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.Show less
CVE-2022-45315 1Mikrotik 1Routeros Jun 17, 2026 Dec 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet.
CVE-2022-45313 1Mikrotik 1Routeros Jun 17, 2026 Dec 5, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.

Previous 1...295296297...532 Next