Vulnerabilities (CVE)

Filtered by CWE-125
Total 9011 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-32458 2 Fedoraproject, Freerdp 2 Fedora, Freerdp 2026-06-17 N/A 9.8 CRITICAL
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx` modes (on by default, require server side support).
CVE-2024-32301 1 Tenda 2 Ac7, Ac7 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32286 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.
CVE-2024-32066 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21578)
CVE-2024-32065 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21577)
CVE-2024-32064 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21575)
CVE-2024-32061 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21566)
CVE-2024-32060 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21565)
CVE-2024-32059 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21564)
CVE-2024-32055 1 Siemens 2 Ps\/iges Parasolid Translator, Simcenter Femap 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process.
CVE-2024-32041 2 Fedoraproject, Freerdp 2 Fedora, Freerdp 2026-06-17 N/A 9.8 CRITICAL
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate `/gfx` (on by default, set `/bpp` or `/rfx` options instead.
CVE-2024-31714 2026-06-17 N/A 7.5 HIGH
Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component.
CVE-2024-31584 1 Linuxfoundation 1 Pytorch 2026-06-17 N/A 5.5 MEDIUM
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
CVE-2024-31412 2026-06-17 N/A 7.8 HIGH
Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed.
CVE-2024-31198 1 Opennetworking 1 Libfluid Msg 2026-06-17 N/A 5.3 MEDIUM
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routineĀ fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.
CVE-2024-31195 1 Opennetworking 1 Libfluid Msg 2026-06-17 N/A 6.5 MEDIUM
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTable::unpack. This issue affects libfluid: 0.1.0.
CVE-2024-31194 1 Opennetworking 1 Libfluid Msg 2026-06-17 N/A 6.5 MEDIUM
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortStats::unpack. This issue affects libfluid: 0.1.0.
CVE-2024-31193 1 Opennetworking 1 Libfluid Msg 2026-06-17 N/A 6.5 MEDIUM
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroup::unpack. This issue affects libfluid: 0.1.0.
CVE-2024-31192 1 Opennetworking 1 Libfluid Msg 2026-06-17 N/A 6.5 MEDIUM
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroupDesc::unpack. This issue affects libfluid: 0.1.0.
CVE-2024-31191 1 Opennetworking 1 Libfluid Msg 2026-06-17 N/A 6.5 MEDIUM
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeter::unpack. This issue affects libfluid: 0.1.0.