Lucene search
+L

1702 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:21 p.m.10 views

CVE-2022-20599

In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS7AI score0.00173EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:05 p.m.18 views

CVE-2021-1968

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

6.2CVSS7AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:05 p.m.12 views

CVE-2021-1969

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

6.2CVSS7AI score0.00176EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:40 p.m.15 views

CVE-2021-38421

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from other memory locations or cause a crash...

7.8CVSS6.4AI score0.00753EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 p.m.11 views

CVE-2021-32742

Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the Data.initbase32Encoded: function opens up the potential for exposing server memory and/or crashing the server Denial of Service for applications where untrusted data can end up in said function. Vapor does not currently...

9.1CVSS6.8AI score0.01199EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:59 a.m.17 views

CVE-2018-20992

An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled...

6.5CVSS7AI score0.01204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/01 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from KVMGETMPSTATE not acquiring an SRCU lock, which could lead to access to unprotected memory...

5.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/04/10 7:55 p.m.27 views

CVE-2025-27187

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS6.2AI score0.00315EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.10 views

PT-2025-15605 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.1, 24.6.4 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

5.5CVSS5.9AI score0.00315EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/04/07 11:15 a.m.4 views

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

7.8CVSS5.8AI score0.00089EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/03/20 6:30 p.m.4 views

Uninitialized Memory Exposure

Overview com.liferay:com.liferay.dynamic.data.mapping.form.web is a Liferay Dynamic Data Mapping Form Web. Affected versions of this package are vulnerable to Uninitialized Memory Exposure due to insufficient permission checks in the doServeResource function in...

5.1CVSS6.9AI score0.00263EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/14 5:57 p.m.17 views

CVE-2024-10838

An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout of the address space to be included into a deserialized data structure, which may potentially lead to thread crashes ...

9.1CVSS7AI score0.00914EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/12 1:15 p.m.8 views

UBUNTU-CVE-2024-10838

An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout of the address space to be included into a deserialized data structure, which may potentially lead to thread crashes ...

9.1CVSS5.8AI score0.00914EPSS
SaveExploits1References5
OSV
OSV
added 2025/03/12 1:03 p.m.11 views

CVE-2024-10838 Integer Underflow in DDS_Security_Deserialize_ methods may lead to OOB read

An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout of the address space to be included into a deserialized data structure, which may potentially lead to thread crashes ...

8.8CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2025/03/12 1:03 p.m.70 views

CVE-2024-10838

CVE-2024-10838 — Concrete details : The vulnerability affects Eclipse Cyclone DDS (DDS) and is due to an integer underflow in the DDS_Security_Deserialize_ methods during deserialization, which can enable an unauthenticated attacker to read out-of-bounds heap memory. The impact per documents incl...

9.1CVSS6.8AI score0.00914EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/03/11 6:10 p.m.33 views

CVE-2025-27164 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

5.5CVSS0.00412EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/08 6:15 a.m.10 views

CVE-2025-20920

Out-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

7.5CVSS6.7AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/06 5:15 a.m.17 views

CVE-2025-20920

Out-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

7.5CVSS0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/06 5:15 a.m.11 views

CVE-2025-20918

Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

7.5CVSS0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/06 5:04 a.m.20 views

CVE-2025-20932

Out-of-bounds read in parsing rle of bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to혻read out-of-bounds memory...

5.5CVSS0.00149EPSS
SaveExploits0References1
Rows per page
Query Builder