Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,136)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-21270 1Nodejs 1Node.js Nov 21, 2024 Dec 3, 2020 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).
CVE-2020-13498 1Pixar 1Openusd Jun 17, 2026 Dec 2, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access which could lead to informa...Show more An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.Show less
CVE-2020-13497 1Pixar 1Openusd Jun 17, 2026 Dec 2, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This...Show more An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.Show less
CVE-2020-13496 1Pixar 1Openusd Jun 17, 2026 Dec 2, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in TfToken Type Index. This...Show more An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in TfToken Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.Show less
CVE-2017-14451 1Ethereum 1Ethereum Nov 21, 2024 Dec 2, 2020 N/A· v4 10.0 CRITICAL· v3 7.5 HIGH· v2 An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-o...Show more An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send malicious smart contract to trigger this vulnerability.Show less
CVE-2020-25181 1We Con 1Plc Editor Jun 17, 2026 Dec 1, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution.
CVE-2020-9117 1Huawei 2Nova 4 Firmware Sydneym Al00 Firmware Jun 17, 2026 Dec 1, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts ma...Show more HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected products. Due to insufficient validation of packet, which may be exploited to cause the information leakage or arbitrary code execution.Show less
CVE-2020-25624 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Nov 30, 2020 N/A· v4 5.0 MEDIUM· v3 4.4 MEDIUM· v2 hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.
CVE-2020-29130 3Debian FedoraprojectLibslirp Project 3Debian Linux FedoraLibslirp Jun 17, 2026 Nov 26, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVE-2020-29129 3Debian FedoraprojectLibslirp Project 3Debian Linux FedoraLibslirp Jun 17, 2026 Nov 26, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVE-2020-28974 2Debian Linux 2Debian Linux Linux Kernel Jun 17, 2026 Nov 20, 2020 N/A· v4 5.0 MEDIUM· v3 6.1 MEDIUM· v2 A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_CO...Show more A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.Show less
CVE-2020-19668 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Nov 20, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.
CVE-2020-7557 1Schneider Electric 1Interactive Graphical Scada System Jun 17, 2026 Nov 19, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition...Show more A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.Show less
CVE-2020-7562 1Schneider Electric 20Modicon M340 Bmx Noc 0401 Firmware Modicon M340 Bmx Noe 0100 FirmwareModicon M340 Bmx Noe 0100h Firmware+17 more Jun 17, 2026 Nov 18, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a s...Show more A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.Show less
CVE-2020-28915 1Linux 1Linux Kernel Jun 17, 2026 Nov 18, 2020 N/A· v4 5.8 MEDIUM· v3 6.1 MEDIUM· v2 A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.
CVE-2020-0573 1Intel 1Csi2 Host Controller Jun 17, 2026 Nov 12, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-8757 2Intel Netapp 2Active Management Technology Firmware Cloud Backup Jun 17, 2026 Nov 12, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-8754 2Intel Netapp 3Active Management Technology Firmware Cloud BackupStandard Manageability Jun 17, 2026 Nov 12, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network a...Show more Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.Show less
CVE-2020-8753 1Intel 2Active Management Technology Firmware Standard Manageability Jun 17, 2026 Nov 12, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via netw...Show more Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.Show less
CVE-2020-8749 2Intel Netapp 2Active Management Technology Firmware Cloud Backup Jun 17, 2026 Nov 12, 2020 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Previous 1...299300301...457 Next