Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,624)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-28805 2Fedoraproject Lua 2Fedora Lua Jun 17, 2026 Apr 8, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
CVE-2021-43453 1Jerryscript 1Jerryscript Jun 17, 2026 Apr 7, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-296...Show more A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-29657.Show less
CVE-2022-22519 1Codesys 18Control For Beaglebone Sl Control For Beckhoff Cx9020Control For Empc A/imx6 Sl+15 more Jun 17, 2026 Apr 7, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
CVE-2022-24786 2Debian Pjsip 2Debian Linux Pjsip Jun 17, 2026 Apr 6, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that dire...Show more PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.Show less
CVE-2022-0806 1Google 1Chrome Jun 17, 2026 Apr 5, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.
CVE-2022-0792 1Google 1Chrome Jun 17, 2026 Apr 5, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-26623 1Bandisoft 1Bandizip Jun 17, 2026 Apr 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
CVE-2021-20295 1Qemu 1Qemu Jun 17, 2026 Apr 1, 2022 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for th...Show more It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756, refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756.Show less
CVE-2022-1207 1Radare 1Radare2 Jun 17, 2026 Apr 1, 2022 N/A· v4 6.6 MEDIUM· v3 4.3 MEDIUM· v2 Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary.
CVE-2021-35117 1Qualcomm 102Apq8096au Firmware Aqt1000 FirmwareAr8031 Firmware+99 more Jun 17, 2026 Apr 1, 2022 N/A· v4 9.1 CRITICAL· v3 9.4 HIGH· v2 An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra...Show more An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2021-35106 1Qualcomm 112Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+109 more Jun 17, 2026 Apr 1, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr...Show more Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35088 1Qualcomm 185Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+182 more Jun 17, 2026 Apr 1, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...Show more Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-39774 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...Show more In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-205989472Show less
CVE-2022-23937 1Windriver 1Vxworks Jun 17, 2026 Mar 29, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario.
CVE-2022-26280 2Fedoraproject Libarchive 2Fedora Libarchive Jun 17, 2026 Mar 28, 2022 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
CVE-2022-1056 2Libtiff Netapp 2Active Iq Unified Manager Libtiff Jun 17, 2026 Mar 28, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.
CVE-2022-27942 2Broadcom Fedoraproject 2Fedora Tcpreplay Jun 17, 2026 Mar 26, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
CVE-2022-27941 2Broadcom Fedoraproject 2Fedora Tcpreplay Jun 17, 2026 Mar 26, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
CVE-2022-27940 2Broadcom Fedoraproject 2Fedora Tcpreplay Jun 17, 2026 Mar 26, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
CVE-2021-44768 1Deltaww 1Cncsoft Screeneditor Jun 17, 2026 Mar 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.

Previous 1...322323324...532 Next