6983 matches found
CVE-2025-47219
In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure...
ImageMagick Buffer Overflow Information Disclosure
The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...
kernel: wifi: iwlwifi: limit printed string from FW file
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's the last TLV in the file, it can perha...
Wlan AP Driver Privilege Disclosure
The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...
Wlan AP Driver Privilege Disclosure
The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...
Wlan STA Driver MediaTek Disclosure
The vulnerability of the Wlan STA Driver microprogramming software from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the software...
Wlan AP Driver Privilege Disclosure
The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...
Wlan AP Driver Privilege Disclosure
The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...
Wlan AP Driver Privilege Disclosure
The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...
CVE-2025-1394 Denial of Service (DoS) vulnerabilitiey in Zigbee library
The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service DoS...
AutoCAD Buffer Overflow RCE
The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PRT file...
Squashfs Heap Buffer Overflow DoS
The vulnerability of the squashfsfillsuper function in the Squashfs component of Linux operating systems is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
kernel: wifi: iwlwifi: limit printed string from FW file
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's the last TLV in the file, it can perha...
Tenda AC20 Router Buffer Overflow
The vulnerability of Tenda AC20 microprogramming software lies in the reading of data outside the buffer in memory when processing the parameter “list” in the file /goform/SetStaticRouteCfg. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code or cause service...
LibSSH sftphandle() Unauthorized Access
The vulnerability of the sftphandle function in the LibSSH library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
Azure Linux 3.0 Security Update: gnutls (CVE-2025-32989)
The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory. - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT...
CBL Mariner 2.0 Security Update: gnutls (CVE-2025-32989)
The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory. - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT...
MediaTek Bluetooth Driver DoS
The vulnerability of the Bluetooth driver for Microprogramming Software MediaTek lies in reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-7745 Modbus TCP buffer overread
Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2...
ABB AC500 V2 security vulnerabilities
ABB AC500 V2 is a PLC from ABB Switzerland. suitable for simple control tasks and complex automation solutions. A security vulnerability exists in ABB AC500 V2 version 2.5.2 and earlier, which stems from vulnerability to buffer over-reading attacks...