Filtered by CWE-125
Total 8221 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-24555 1 Siemens 2 Solid Edge Se2022, Solid Edge Se2023 2024-11-21 7.8 High
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-24552 1 Siemens 2 Solid Edge Se2022, Solid Edge Se2023 2024-11-21 7.8 High
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.
CVE-2023-24473 1 Openimageio 1 Openimageio 2024-11-21 5.3 Medium
An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2023-23581 1 Softether 1 Vpn 2024-11-21 7.5 High
A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service.
CVE-2023-23528 1 Apple 3 Ipados, Iphone Os, Tvos 2024-11-21 6.5 Medium
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS 16.4. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
CVE-2023-23441 1 Hihonor 1 Magic Ui 2024-11-21 6 Medium
Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
CVE-2023-22845 1 Openimageio 1 Openimageio 2024-11-21 7.5 High
An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2023-22656 2024-11-21 3.9 Low
Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-22233 3 Adobe, Apple, Microsoft 3 After Effects, Macos, Windows 2024-11-21 5.5 Medium
After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21669 1 Qualcomm 122 Aqt1000, Aqt1000 Firmware, Flight Rb5 5g Platform and 119 more 2024-11-21 8.2 High
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2023-21667 1 Qualcomm 86 Qca6390, Qca6390 Firmware, Qca6391 and 83 more 2024-11-21 6.5 Medium
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
CVE-2023-21661 1 Qualcomm 230 Ar8035, Ar8035 Firmware, Ar9380 and 227 more 2024-11-21 7.5 High
Transient DOS while parsing WLAN beacon or probe-response frame.
CVE-2023-21660 1 Qualcomm 158 Csr8811, Csr8811 Firmware, Immersive Home 214 Platform and 155 more 2024-11-21 7.5 High
Transient DOS in WLAN Firmware while parsing FT Information Elements.
CVE-2023-21659 1 Qualcomm 540 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 537 more 2024-11-21 7.5 High
Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2023-21658 1 Qualcomm 302 Ar8035, Ar8035 Firmware, Ar9380 and 299 more 2024-11-21 7.5 High
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
CVE-2023-21625 1 Qualcomm 92 Apq8009, Apq8009 Firmware, Apq8017 and 89 more 2024-11-21 8.2 High
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2023-21620 2 Adobe, Microsoft 2 Framemaker, Windows 2024-11-21 5.5 Medium
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21578 3 Adobe, Apple, Microsoft 3 Photoshop, Macos, Windows 2024-11-21 5.5 Medium
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21577 3 Adobe, Apple, Microsoft 3 Photoshop, Macos, Windows 2024-11-21 5.5 Medium
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21379 1 Google 1 Android 2024-11-21 4.4 Medium
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.