Browse CVEs

MEDIUM 5.5 CVE-2022-23196 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to discl… Illustrator after 26.0.2 Fix from $1,6002022-02-16 MEDIUM 5.5 CVE-2022-23197 Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to discl… Illustrator after 26.0.2 Fix from $1,6002022-02-16 HIGH 8.1 CVE-2022-0114 Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory r… Chrome 97.0.4692.71+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2021-4100 Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 96.0.4664.110+ Fix from $1,9502022-02-11 MEDIUM 5.5 CVE-2021-39664 In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information … Android Patch available Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2021-39666 In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information discl… Android Patch available Fix from $1,6002022-02-11 HIGH 7.5 CVE-2021-39677 In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-1… Android Mitigation only Fix from $1,9502022-02-11 MEDIUM 5.5 CVE-2021-39687 In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local inf… Android Mitigation only Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2021-39688 In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privil… Android No fix yet Fix from $1,6002022-02-11 HIGH 7.5 CVE-2022-24314EPSS 18% A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeated… Interactive Graphical Scada System Data Server after 15.0.0.22020 Fix from $1,9502022-02-09 HIGH 7.5 CVE-2022-24315EPSS 19% A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. … Interactive Graphical Scada System Data Server after 15.0.0.22020 Fix from $1,9502022-02-09 MEDIUM 5.5 CVE-2022-21226 Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable informati… Trace Analyzer And Collector 2021.5+ Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2022-21133 Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of… Trace Analyzer And Collector 2021.5+ Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2022-0534 A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malici… Debian Linux Patch available Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2021-33105 Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an authentica… Core I5 8305g Firmware 21.10+ Fix from $1,6002022-02-09 MEDIUM 5.4 CVE-2021-33120 Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to p… Atom P5942b Firmware Mitigation only Fix from $1,6002022-02-09 MEDIUM 6.7 CVE-2021-0118 Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via loca… Cloud Backup Mitigation only Fix from $1,6002022-02-09 HIGH 7.8 CVE-2021-44018 A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All version… Jt2go 13.2.0.7 / 13.3.0.1+ Fix from $1,9502022-02-09 CRITICAL 9.1 CVE-2022-0525 Out-of-bounds Read in Homebrew mruby prior to 3.2. Mruby after 3.1 Fix from $2,3002022-02-09 HIGH 8.1 CVE-2022-23592 Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is do… Tensorflow 2.8.0+ Fix from $1,9502022-02-04 MEDIUM 5.5 CVE-2022-23594 Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef`… Tensorflow Mitigation only Fix from $1,6002022-02-04 HIGH 7.1 CVE-2022-23805 A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to… Worry Free Business Security Patch available Fix from $1,9502022-02-04 HIGH 8.8 CVE-2022-23574 Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due t… Tensorflow after 2.6.2 Fix from $1,9502022-02-04 HIGH 8.8 CVE-2022-23560 Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of ar… Tensorflow after 2.6.2 Fix from $1,9502022-02-04 MEDIUM 5.3 CVE-2021-46671 options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client. Debian Linux 0.7.5+ Fix from $1,6002022-02-04 HIGH 8.1 CVE-2022-21728 Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the valu… Tensorflow after 2.6.2 Fix from $1,9502022-02-03 HIGH 8.1 CVE-2022-21730 Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensor… Tensorflow after 2.6.2 Fix from $1,9502022-02-03 HIGH 8.8 CVE-2022-21726 Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can resul… Tensorflow after 2.6.2 Fix from $1,9502022-02-03 CRITICAL 9.1 CVE-2021-24043 A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS … Whatsapp Mitigation only Fix from $2,3002022-02-02 MEDIUM 6.5 CVE-2022-24198 iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to caus… Itext Patch available Fix from $1,6002022-02-01