Vulnerabilities (CVE)

Filtered by CWE-125
Total 8933 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2905 3 Debian, Linux, Redhat 3 Debian Linux, Linux Kernel, Enterprise Linux 2026-06-17 N/A 5.5 MEDIUM
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
CVE-2022-2881 1 Isc 1 Bind 2026-06-17 N/A 5.5 MEDIUM
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
CVE-2022-2831 1 Blender 1 Blender 2026-06-17 N/A 7.5 HIGH
A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.
CVE-2022-2816 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 N/A 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.
CVE-2022-2785 1 Linux 1 Linux Kernel 2026-06-17 N/A 6.7 MEDIUM
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c
CVE-2022-2605 2 Fedoraproject, Google 2 Fedora, Chrome 2026-06-17 N/A 6.5 MEDIUM
Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-2581 1 Vim 1 Vim 2026-06-17 N/A 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
CVE-2022-2469 2 Debian, Gnu 2 Debian Linux, Gnu Sasl 2026-06-17 N/A 3.8 LOW
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client
CVE-2022-2301 1 Chafa Project 1 Chafa 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.
CVE-2022-2287 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 5.8 MEDIUM 7.1 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2286 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 6.8 MEDIUM 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2257 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 6.8 MEDIUM 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2206 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 6.8 MEDIUM 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2183 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 6.8 MEDIUM 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2175 2 Fedoraproject, Vim 2 Fedora, Vim 2026-06-17 6.8 MEDIUM 7.8 HIGH
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2127 4 Debian, Fedoraproject, Redhat and 1 more 4 Debian Linux, Fedora, Enterprise Linux and 1 more 2026-06-17 N/A 5.9 MEDIUM
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
CVE-2022-2126 4 Apple, Debian, Fedoraproject and 1 more 4 Macos, Debian Linux, Fedora and 1 more 2026-06-17 6.8 MEDIUM 7.8 HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2010 2 Fedoraproject, Google 2 Fedora, Chrome 2026-06-17 N/A 9.3 CRITICAL
Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2022-29537 1 Gpac 1 Gpac 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.
CVE-2022-29506 1 Fujielectric 2 V-server, V-sft 2026-06-17 6.8 MEDIUM 7.8 HIGH
Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.