Browse CVEs

MEDIUM 5.5 CVE-2023-21308 In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additiona… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21309 In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional … Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 6.5 CVE-2023-21315 In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclos… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-45897 exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. Exfatprogs 1.2.2+ Fix from $1,6002023-10-28 CRITICAL 9.8 CVE-2023-46569 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. Radare2 5.9.0+ Fix from $2,3002023-10-28 CRITICAL 9.8 CVE-2023-46570 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. Radare2 5.9.0+ Fix from $2,3002023-10-28 MEDIUM 5.5 CVE-2023-46407 FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function. Ffmpeg Patch available Fix from $1,6002023-10-27 HIGH 7.8 CVE-2023-27854 An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to co… Arena 16.20.02+ Fix from $1,9502023-10-27 HIGH 7.8 CVE-2023-39936 In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to… Graphite after 13.0.48 Fix from $1,9502023-10-26 HIGH 8.8 CVE-2023-46603 In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in… Demoiccmax Patch available Fix from $1,9502023-10-23 MEDIUM 5.5 CVE-2023-46331 WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault. Webassembly Binary Toolkit Mitigation only Fix from $1,6002023-10-23 HIGH 7.5 CVE-2023-31122 Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. Debian Linux 2.4.58+ Fix from $1,9502023-10-23 HIGH 7.1 CVE-2023-45682 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro whe… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.1 CVE-2023-45661 stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_… Stb Image.h Patch available Fix from $1,9502023-10-21 HIGH 8.1 CVE-2023-45662 stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set… Stb Image.h Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-3487 An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage… Gecko Bootloader after 4.3.1 Fix from $1,9502023-10-20 MEDIUM 6.0 CVE-2023-34044 VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality … Workstation 13.5 / 17.5+ Fix from $1,6002023-10-20 HIGH 7.8 CVE-2023-5059 Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An atta… Fft Imaging 1.4.1+ Fix from $1,9502023-10-19 HIGH 7.5 CVE-2023-35656 In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remot… Android Mitigation only Fix from $1,9502023-10-18 HIGH 7.5 CVE-2023-35663 In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information … Android Mitigation only Fix from $1,9502023-10-18 HIGH 7.5 CVE-2023-23581 A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially cra… Vpn No fix yet Fix from $1,9502023-10-12 MEDIUM 5.5 CVE-2023-43789 A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error an… Enterprise Linux 3.5.17+ Fix from $1,6002023-10-12 CRITICAL 9.8 CVE-2023-35647 In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… Android Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-35648 In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… Android Mitigation only Fix from $2,3002023-10-11 HIGH 7.5 CVE-2023-35652 In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… Android Mitigation only Fix from $1,9502023-10-11 MEDIUM 6.7 CVE-2023-35654 In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of pr… Android Mitigation only Fix from $1,6002023-10-11 MEDIUM 6.7 CVE-2023-35655 In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loca… Android Mitigation only Fix from $1,6002023-10-11 HIGH 7.5 CVE-2023-35661 In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote… Android Mitigation only Fix from $1,9502023-10-11 HIGH 7.5 CVE-2023-44114 Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. Harmonyos No fix yet Fix from $1,9502023-10-11 HIGH 7.5 CVE-2023-44103 Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. Harmonyos No fix yet Fix from $1,9502023-10-11