Browse CVEs

MEDIUM 5.5 CVE-2023-34256 An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c bec… Linux Kernel 6.3.3+ Fix from $1,6002023-05-31 CRITICAL 9.8 CVE-2022-48479 The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause e… Harmonyos Mitigation only Fix from $2,3002023-05-26 CRITICAL 9.8 CVE-2023-23301 The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the e… Connect Iq after 4.1.7 Fix from $2,3002023-05-23 CRITICAL 9.1 CVE-2023-2838 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. Gpac 2.2.2+ Fix from $2,3002023-05-22 CRITICAL 9.1 CVE-2023-2597 In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a strin… Openj9 0.38.0+ Fix from $2,3002023-05-22 MEDIUM 5.3 CVE-2023-33285 An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a cra… Qt 5.15.4 / 6.2.9+ Fix from $1,6002023-05-22 MEDIUM 5.5 CVE-2023-21118 In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclos… Android Patch available Fix from $1,6002023-05-15 MEDIUM 5.5 CVE-2023-21112 In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… Android Patch available Fix from $1,6002023-05-15 MEDIUM 5.5 CVE-2023-20703 In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 5.5 CVE-2023-20706 In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… Android Mitigation only Fix from $1,6002023-05-15 HIGH 7.8 CVE-2023-25008 A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code ex… 3ds Max Usd after 0.3 Fix from $1,9502023-05-12 HIGH 8.1 CVE-2023-2512 Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 e… Workerd 1.20230419.0+ Fix from $1,9502023-05-12 HIGH 7.8 CVE-2023-29273 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could r… Substance 3d Painter after 8.3.0 Fix from $1,9502023-05-11 HIGH 7.8 CVE-2023-29274 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could r… Substance 3d Painter after 8.3.0 Fix from $1,9502023-05-11 HIGH 7.8 CVE-2023-29275 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could r… Substance 3d Painter after 8.3.0 Fix from $1,9502023-05-11 MEDIUM 5.5 CVE-2023-29277 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… Substance 3d Painter after 8.3.0 Fix from $1,6002023-05-11 MEDIUM 5.5 CVE-2023-29279 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… Substance 3d Painter after 8.3.0 Fix from $1,6002023-05-11 HIGH 7.8 CVE-2023-29280 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could r… Substance 3d Painter after 8.3.0 Fix from $1,9502023-05-11 HIGH 7.8 CVE-2023-29281 Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could r… Substance 3d Painter after 8.3.0 Fix from $1,9502023-05-11 HIGH 7.5 CVE-2022-46377 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-c… Uc Ftps Patch available Fix from $1,9502023-05-10 HIGH 7.5 CVE-2022-46378 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-c… Uc Ftps Patch available Fix from $1,9502023-05-10 MEDIUM 5.5 CVE-2023-23909 Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… Oneapi Hpc Toolkit 2021.8.0 / 2023.0.0+ Fix from $1,6002023-05-10 MEDIUM 5.5 CVE-2022-21239 Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable i… Quickassist Technology 1.9.0-0008+ Fix from $1,6002023-05-10 HIGH 7.5 CVE-2021-46765 Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially le… Ryzen 6600h Firmware Mitigation only Fix from $1,9502023-05-09 HIGH 7.5 CVE-2021-46794 Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum … Ryzen 5300g Firmware Mitigation only Fix from $1,9502023-05-09 HIGH 8.2 CVE-2021-26365 Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potenti… Ryzen 5 2400g Firmware Mitigation only Fix from $1,9502023-05-09 HIGH 7.5 CVE-2021-46749 Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum … Ryzen 5300g Firmware Mitigation only Fix from $1,9502023-05-09 MEDIUM 5.9 CVE-2023-24900 Windows NTLM Security Support Provider Information Disclosure Vulnerability Windows 10 1507 10.0.10240.19926 / 10.0.14393.5921+ Fix from $1,6002023-05-09 HIGH 7.8 CVE-2023-24902EPSS 5% Win32k Elevation of Privilege Vulnerability Windows 11 21h2 10.0.22000.1702 / 10.0.22000.1936+ Fix from $1,9502023-05-09 MEDIUM 5.5 CVE-2023-30084 An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c. Libming No fix yet Fix from $1,6002023-05-09