curl: libcurl: ASN.1 date parser overread

A flaw was found in libcurl, where libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the time fraction, leading to a strlen performed on a pointer to a heap...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

UBUNTU-CVE-2024-45776

When reading the language .mo file in grubmofileopen, grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data o...

AsoC Kernel Code Execution

The vulnerability of component AsoC in the Linux operating system’s kernel is related to reading beyond the buffer boundaries in memory within the function sndsocputvolswsx. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux USB Kernel Privilege Escalation

The vulnerability of the Linux operating system’s USB kernel component relates to the operation of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

WebContentFilter DoS

The vulnerability of the WebContentFilter filter in operating systems such as iOS, iPadOS, Mac OS, and visionOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Tenda W30E setFixTools Command Execution

The vulnerability of the setFixTools function in the microprogramming software for Tenda W30E wireless Wi-Fi routers lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Tenda W30E setUmountUSBPartition Command Execution

The vulnerability of the setUmountUSBPartition function in the microprogramming software for Tenda W30E wireless Wi-Fi routers is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

libarchive security vulnerabilities

libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in libarchive 3.7.7 and earlier versions, which stems from a heap-based buffer over-read due to incorrect handling of truncation in the middle of GNU long link names...

SUSE CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

System Settings File Overwrite

The vulnerability of the System Settings component in MacOS operating systems is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to overwrite arbitrary files...

ASP TCP Component Data Compromise

The vulnerability of the ASP TCP component on MacOs systems is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2025-6512 · Zettlr · Zettler 130.8005 Tcp/Ip Gateway

Name of the Vulnerable Software and Affected Versions: Zettler 130.8005 TCP/IP Gateway version 12h Description: A buffer over-read issue was discovered, affecting the web server and allowing information disclosure. This can be triggered by leveraging a memory leak, enabling a remote unauthenticat...

Nozomi Networks TCP/IP Gateway security vulnerabilities

Nozomi Networks TCP/IP Gateway is a gateway program from Nozomi Networks, USA. A security vulnerability exists in Nozomi Networks TCP/IP Gateway version 12h, which stems from the presence of a buffer over-read that could allow a remote attacker to obtain an authentication token and bypass...

Vim Use-After-Free DoS

The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2025-0908

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-0901

PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm – Do not read beyond the mfuart notification. In the event that the firmware sends a notification claiming to have more data than it actually does, we will read beyond the allocated space for the notification. ...

Astra Linux – Vulnerability in hdf5

The HDF5 Library from version 1.14.3 contains a heap-based buffer overflow issue in the H5Fint.c file, specifically in the H5Faddrdecodelen function, which leads to the corruption of the instruction pointer...