Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,524)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-27381 1Siemens 1Solid Edge Jun 17, 2026 Mar 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR file...Show more A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12534)Show less
CVE-2021-21076 1Adobe 1Animate Jun 17, 2026 Mar 12, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current...Show more Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21075 1Adobe 1Animate Jun 17, 2026 Mar 12, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current...Show more Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21074 1Adobe 1Animate Jun 17, 2026 Mar 12, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current...Show more Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21073 1Adobe 1Animate Jun 17, 2026 Mar 12, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current...Show more Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21072 1Adobe 1Animate Jun 17, 2026 Mar 12, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current...Show more Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21056 1Adobe 1Framemaker Jun 17, 2026 Mar 12, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...Show more Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-28308 1Fltk Project 1Fltk Jun 17, 2026 Mar 12, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.
CVE-2021-27647 1Synology 1Diskstation Manager Jun 17, 2026 Mar 12, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.
CVE-2020-36281 3Debian FedoraprojectLeptonica 3Debian Linux FedoraLeptonica Jun 17, 2026 Mar 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
CVE-2020-36280 2Fedoraproject Leptonica 2Fedora Leptonica Jun 17, 2026 Mar 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
CVE-2020-36279 3Debian FedoraprojectLeptonica 3Debian Linux FedoraLeptonica Jun 17, 2026 Mar 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
CVE-2020-36278 3Debian FedoraprojectLeptonica 3Debian Linux FedoraLeptonica Jun 17, 2026 Mar 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
CVE-2021-0463 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 5.5 MEDIUM· v3 1.9 LOW· v2 In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local information disclosure with no additional execution privileges neede...Show more In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154867068Show less
CVE-2021-0459 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is n...Show more In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157154534Show less
CVE-2021-0379 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interacti...Show more In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955Show less
CVE-2021-0394 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges nee...Show more In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291Show less
CVE-2021-0378 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is...Show more In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193Show less
CVE-2021-0374 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges neede...Show more In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641Show less
CVE-2021-0371 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interacti...Show more In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-164440989Show less

Previous 1...359360361...527 Next