Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2024-06-19 CVE-2021-47604 Out-of-bounds Read vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This condition checks "len" but it does not check "offset" and that could result in an out of bounds read if "offset > dev->config_size". The problem is that since both variables are unsigned the "dev->config_size - offset" subtraction would result in a very high unsigned value. I think these checks might not be necessary because "len" and "offset" are supposed to already have been validated using the vhost_vdpa_config_validate() function.
local
low complexity
linux CWE-125
7.1
2024-06-19 CVE-2024-38560 Out-of-bounds Read vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer.
local
low complexity
linux CWE-125
7.1
2024-06-14 CVE-2024-36502 Out-of-bounds Read vulnerability in Huawei Emui and Harmonyos
Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.
local
low complexity
huawei CWE-125
5.5
2024-06-13 CVE-2024-29778 Out-of-bounds Read vulnerability in Google Android
In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
local
high complexity
google CWE-125
4.7
2024-06-13 CVE-2024-29781 Out-of-bounds Read vulnerability in Google Android
In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation.
network
low complexity
google CWE-125
7.5
2024-06-13 CVE-2024-32894 Out-of-bounds Read vulnerability in Google Android
In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2024-06-13 CVE-2024-32897 Out-of-bounds Read vulnerability in Google Android
In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
network
high complexity
google CWE-125
5.9
2024-06-13 CVE-2024-32898 Out-of-bounds Read vulnerability in Google Android
In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
local
high complexity
google CWE-125
4.7
2024-06-13 CVE-2024-32904 Out-of-bounds Read vulnerability in Google Android
In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
local
high complexity
google CWE-125
4.7
2024-06-10 CVE-2024-27802 Out-of-bounds Read vulnerability in Apple products
An out-of-bounds read was addressed with improved input validation.
local
low complexity
apple CWE-125
7.8