Vulnerabilities (CVE)

Filtered by CWE-125
Total 7207 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0924 4 Debian, Fedoraproject, Libtiff and 1 more 4 Debian Linux, Fedora, Libtiff and 1 more 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
CVE-2022-0806 4 Apple, Google, Linux and 1 more 4 Macos, Chrome, Linux Kernel and 1 more 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.
CVE-2022-0792 1 Google 1 Chrome 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0717 1 Mruby 1 Mruby 2024-11-21 6.4 MEDIUM 9.1 CRITICAL
Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
CVE-2022-0630 1 Mruby 1 Mruby 2024-11-21 5.8 MEDIUM 7.1 HIGH
Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2022-0623 1 Mruby 1 Mruby 2024-11-21 6.4 MEDIUM 9.1 CRITICAL
Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2022-0534 2 Debian, Htmldoc Project 2 Debian Linux, Htmldoc 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).
CVE-2022-0525 1 Mruby 1 Mruby 2024-11-21 6.4 MEDIUM 9.1 CRITICAL
Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2022-0497 1 Openscad 1 Openscad 2024-11-21 N/A 7.1 HIGH
A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.
CVE-2022-0496 1 Openscad 1 Openscad 2024-11-21 N/A 5.5 MEDIUM
A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().
CVE-2022-0400 1 Linux 1 Linux Kernel 2024-11-21 N/A 7.5 HIGH
An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.
CVE-2022-0393 2 Fedoraproject, Vim 2 Fedora, Vim 2024-11-21 5.8 MEDIUM 7.1 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0368 3 Apple, Debian, Vim 3 Macos, Debian Linux, Vim 2024-11-21 6.8 MEDIUM 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0319 4 Apple, Canonical, Debian and 1 more 4 Macos, Ubuntu Linux, Debian Linux and 1 more 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
Out-of-bounds Read in vim/vim prior to 8.2.
CVE-2022-0284 1 Imagemagick 1 Imagemagick 2024-11-21 N/A 7.1 HIGH
A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.
CVE-2022-0173 2 Fedoraproject, Radare 2 Fedora, Radare2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
radare2 is vulnerable to Out-of-bounds Read
CVE-2022-0128 2 Apple, Vim 3 Mac Os X, Macos, Vim 2024-11-21 6.8 MEDIUM 7.8 HIGH
vim is vulnerable to Out-of-bounds Read
CVE-2022-0114 2 Fedoraproject, Google 2 Fedora, Chrome 2024-11-21 5.8 MEDIUM 8.1 HIGH
Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.
CVE-2021-4193 4 Apple, Debian, Fedoraproject and 1 more 5 Mac Os X, Macos, Debian Linux and 2 more 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
vim is vulnerable to Out-of-bounds Read
CVE-2021-4183 3 Fedoraproject, Oracle, Wireshark 4 Fedora, Http Server, Zfs Storage Appliance Kit and 1 more 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file