Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,624)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-0623 1Mruby 1Mruby Jun 17, 2026 Feb 17, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2021-43302 2Debian Teluu 2Debian Linux Pjsip Jun 17, 2026 Feb 16, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 characters.
CVE-2021-3753 3Linux NetappRedhat 12Active Iq Unified Manager Bootstrap OsElement Software+9 more Jun 17, 2026 Feb 16, 2022 N/A· v4 4.7 MEDIUM· v3 1.9 LOW· v2 A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The...Show more A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.Show less
CVE-2022-23204 1Adobe 1Premiere Rush Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23197 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23196 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23195 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23194 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23193 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23192 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23191 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-23190 1Adobe 1Illustrator Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-0114 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 12, 2022 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.
CVE-2021-4100 1Google 1Chrome Jun 17, 2026 Feb 11, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-23429 1Google 1Android Jun 17, 2026 Feb 11, 2022 N/A· v4 4.4 MEDIUM· v3 3.6 LOW· v2 An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.
CVE-2021-39688 1Google 1Android Jun 17, 2026 Feb 11, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: A...Show more In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206039140References: N/AShow less
CVE-2021-39687 1Google 1Android Jun 17, 2026 Feb 11, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. Use...Show more In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204421047References: N/AShow less
CVE-2021-39677 1Google 1Android Jun 17, 2026 Feb 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android ID: A-205097028
CVE-2021-39666 1Google 1Android Jun 17, 2026 Feb 11, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction...Show more In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-204445255Show less
CVE-2021-39664 1Google 1Android Jun 17, 2026 Feb 11, 2022 N/A· v4 5.5 MEDIUM· v3 1.9 LOW· v2 In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privil...Show more In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029Show less

Previous 1...328329330...532 Next