Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2022-12-05 CVE-2022-45313 Out-of-bounds Read vulnerability in Mikrotik Routeros
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process.
network
low complexity
mikrotik CWE-125
8.8
2022-12-05 CVE-2022-45315 Out-of-bounds Read vulnerability in Mikrotik Routeros
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process.
network
low complexity
mikrotik CWE-125
critical
9.8
2022-11-26 CVE-2022-45909 Out-of-bounds Read vulnerability in Drachtio Drachtio-Server
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
network
low complexity
drachtio CWE-125
critical
9.1
2022-11-19 CVE-2022-31612 Out-of-bounds Read vulnerability in Nvidia Cloud Gaming Guest, GPU Display Driver and Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information.
local
low complexity
nvidia CWE-125
7.1
2022-11-19 CVE-2022-31616 Out-of-bounds Read vulnerability in Nvidia Cloud Gaming Guest, GPU Display Driver and Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information disclosure.
local
low complexity
nvidia CWE-125
7.1
2022-11-19 CVE-2022-31617 Out-of-bounds Read vulnerability in Nvidia Cloud Gaming Guest, GPU Display Driver and Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
local
low complexity
nvidia CWE-125
7.8
2022-11-15 CVE-2022-25676 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
local
low complexity
qualcomm CWE-125
5.5
2022-11-15 CVE-2022-33236 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes.
network
low complexity
qualcomm CWE-125
7.5
2022-11-15 CVE-2022-33237 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold.
network
low complexity
qualcomm CWE-125
7.5
2022-11-14 CVE-2022-31630 Out-of-bounds Read vulnerability in PHP
In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used.
local
low complexity
php CWE-125
7.1