Vulnerabilities (CVE)

Filtered by CWE-125
Total 7759 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-45315 1 Mikrotik 1 Routeros 2025-04-24 N/A 9.8 CRITICAL
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows attackers to execute arbitrary code via a crafted packet.
CVE-2022-45313 1 Mikrotik 1 Routeros 2025-04-24 N/A 8.8 HIGH
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.
CVE-2022-39130 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-24 N/A 5.5 MEDIUM
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-42774 2 Google, Unisoc 14 Android, S8002, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42773 2 Google, Unisoc 14 Android, S8001, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42768 2 Google, Unisoc 14 Android, S8013, Sc7731e and 11 more 2025-04-23 N/A 4.3 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42781 2 Google, Unisoc 14 Android, S8006, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42780 2 Google, Unisoc 14 Android, S8005, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42779 2 Google, Unisoc 14 Android, S8003, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42762 2 Google, Unisoc 14 Android, S8007, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42761 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42759 2 Google, Unisoc 14 Android, S8017, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42758 2 Google, Unisoc 14 Android, S8016, Sc7731e and 11 more 2025-04-23 N/A 3.3 LOW
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-42757 2 Google, Unisoc 14 Android, S8015, Sc7731e and 11 more 2025-04-23 N/A 3.3 LOW
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-1304 3 E2fsprogs Project, Fedoraproject, Redhat 3 E2fsprogs, Fedora, Enterprise Linux 2025-04-23 6.8 MEDIUM 7.8 HIGH
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
CVE-2021-44142 6 Canonical, Debian, Fedoraproject and 3 more 23 Ubuntu Linux, Debian Linux, Fedora and 20 more 2025-04-23 9.0 HIGH 8.8 HIGH
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
CVE-2022-2380 1 Linux 1 Linux Kernel 2025-04-23 N/A 5.5 MEDIUM
The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the kernel.
CVE-2022-40663 1 Nikon 1 Nis-elements Viewer 2025-04-23 N/A 7.8 HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15697.
CVE-2025-30305 1 Adobe 1 Xmp Toolkit Software Development Kit 2025-04-23 N/A 5.5 MEDIUM
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2022-42769 2 Google, Unisoc 14 Android, S8014, Sc7731e and 11 more 2025-04-23 N/A 3.3 LOW
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.