Browse CVEs

HIGH 7.5 CVE-2022-41988 An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A sp… Debian Linux No fix yet Fix from $1,9502022-12-22 CRITICAL 9.1 CVE-2022-41649 A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted T… Debian Linux No fix yet Fix from $2,3002022-12-22 MEDIUM 5.5 CVE-2022-41684 A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image fi… Openimageio No fix yet Fix from $1,6002022-12-22 HIGH 8.6 CVE-2022-46872 An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br… Firefox 102.6 / 108.0+ Fix from $1,9502022-12-22 MEDIUM 5.5 CVE-2022-3266 An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 1… Firefox 102.3 / 105.0+ Fix from $1,6002022-12-22 CRITICAL 9.8 CVE-2022-31747 Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox … Firefox 91.10 / 101+ Fix from $2,3002022-12-22 MEDIUM 6.5 CVE-2022-28285 When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conjunction with another vulnerabil… Firefox 91.8 / 99.0+ Fix from $1,6002022-12-22 MEDIUM 6.5 CVE-2022-22742 When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This … Firefox 91.5 / 96.0+ Fix from $1,6002022-12-22 HIGH 7.5 CVE-2022-46317 The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. Harmonyos 2.1+ Fix from $1,9502022-12-20 CRITICAL 9.8 CVE-2022-46320 The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting. Harmonyos 2.0+ Fix from $2,3002022-12-20 CRITICAL 9.8 CVE-2022-23537 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S… Debian Linux 2.13.1+ Fix from $2,3002022-12-20 CRITICAL 9.1 CVE-2022-44940 Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc. Patchelf Patch available Fix from $2,3002022-12-19 HIGH 7.1 CVE-2022-42946 Parsing a maliciously crafted X_B and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjuncti… Maya Mitigation only Fix from $1,9502022-12-19 HIGH 7.1 CVE-2022-47520 An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000… Linux Kernel 5.10.157 / 5.15.81+ Fix from $1,9502022-12-18 HIGH 7.5 CVE-2022-2966 Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions. Dopsoft No fix yet Fix from $1,9502022-12-16 MEDIUM 5.5 CVE-2022-44498 Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Illustrator after 26.5.1 Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-44499 Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Illustrator after 26.5.1 Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-44500 Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Illustrator after 26.5.1 Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-44502 Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Illustrator after 26.5.1 Fix from $1,6002022-12-16 HIGH 7.5 CVE-2022-42524 In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Mitigation only Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-42510 In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local e… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20604 In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote… Android Mitigation only Fix from $1,6002022-12-16 HIGH 7.5 CVE-2022-20605 In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote i… Android Mitigation only Fix from $1,9502022-12-16 MEDIUM 5.5 CVE-2022-20608 In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure … Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20609 In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wit… Android Mitigation only Fix from $1,6002022-12-16 HIGH 8.8 CVE-2022-20610 In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE a… Android Mitigation only Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20557 In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation … Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20563 In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20574 In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclos… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20575 In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… Android Mitigation only Fix from $1,6002022-12-16