Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,553)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-1846 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds...Show more Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation.Show less
CVE-2021-1830 1Apple 2Ipados Iphone Os Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
CVE-2021-30791 1Apple 4Ipados Iphone OsMac Os X+1 more Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted file may disclose user information.
CVE-2021-30789 1Apple 5Iphone Os Mac Os XMacos+2 more Jun 17, 2026 Sep 8, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font fi...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.Show less
CVE-2021-30755 1Apple 3Macos TvosWatchos Jun 17, 2026 Sep 8, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5. An out-of-bounds read was addressed with improved input validation.
CVE-2021-30753 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. An out-of-bounds read was addressed with...Show more Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. An out-of-bounds read was addressed with improved input validation.Show less
CVE-2021-30752 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Sep 8, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved...Show more Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved input validation.Show less
CVE-2021-30746 1Apple 4Ipados Iphone OsMac Os X+1 more Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a ma...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.Show less
CVE-2021-30733 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watc...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted font may result in the disclosure of process memory.Show less
CVE-2021-1930 1Qualcomm 97Aqt1000 Firmware Csrb31024 FirmwareQca6174a Firmware+94 more Jun 17, 2026 Sep 8, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1928 1Qualcomm 108Apq8009 Firmware Apq8053 FirmwareAr9380 Firmware+105 more Jun 17, 2026 Sep 8, 2021 N/A· v4 6.1 MEDIUM· v3 3.6 LOW· v2 Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...Show more Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-19751 1Gpac 1Gpac Jun 17, 2026 Sep 7, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
CVE-2020-19750 1Gpac 1Gpac Jun 17, 2026 Sep 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.
CVE-2021-39258 2Debian Tuxera 2Debian Linux Ntfs 3g Jun 17, 2026 Sep 7, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22.
CVE-2021-39255 2Debian Tuxera 2Debian Linux Ntfs 3g Jun 17, 2026 Sep 7, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22.
CVE-2021-39253 3Debian FedoraprojectTuxera 3Debian Linux FedoraNtfs 3g Jun 17, 2026 Sep 7, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.
CVE-2021-39252 3Debian FedoraprojectTuxera 3Debian Linux FedoraNtfs 3g Jun 17, 2026 Sep 7, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.
CVE-2021-40516 2Debian Weechat 2Debian Linux Weechat Jun 17, 2026 Sep 5, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.
CVE-2021-23437 2Fedoraproject Python 2Fedora Pillow Jun 17, 2026 Sep 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
CVE-2021-36019 1Adobe 1After Effects Jun 17, 2026 Sep 2, 2021 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe After Effects version 18.2.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitra...Show more Adobe After Effects version 18.2.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...341342343...528 Next