Out-of-Bounds Access — 7 CVEs (Page 1/1)

2025-08-16

Low

CVE-2023-3865

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger…

CVSS: N/A CWE: N/A

2025-08-12

High

CVE-2025-22839

Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.

CVSS: 7.5 CWE: CWE-1220

2025-08-05

Medium

CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG 2.5.3 and earlier, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is no…

CVSS: 6.6 CWE: CWE-457

2025-07-28

Low

CVE-2025-38497

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs…

CVSS: N/A CWE: N/A

2025-07-10

Medium

CVE-2025-32990

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an…

CVSS: 6.5 CWE: CWE-122

2025-07-08

Low

CVE-2025-38236

In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in unix_stream_read_generic(). The follo…

CVSS: N/A CWE: N/A

2025-05-27

Medium

CVE-2025-27701

In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NUL…

CVSS: 5.5 CWE: CWE-476