CWE-125 · Out-of-bounds Read (page 65)
Page 65 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15473 | Critical | 9.1 | 2020-07-01 | In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c. |
CVE-2020-15472 | Critical | 9.1 | 2020-07-01 | In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a paylo… |
CVE-2020-15471 | Critical | 9.1 | 2020-07-01 | In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c. |
CVE-2020-5971 | High | 7.8 | 2020-06-30 | NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as ind… |
CVE-2020-7816 | High | 7.0 | 2020-06-30 | A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrar… |
CVE-2020-15395 | High | 7.8 | 2020-06-30 | In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one… |
CVE-2020-9628 | High | 7.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9627 | High | 7.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9625 | High | 7.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9558 | Low | 3.3 | 2020-06-26 | Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-9557 | Medium | 5.5 | 2020-06-26 | Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-9553 | Low | 3.3 | 2020-06-26 | Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-3809 | Medium | 5.5 | 2020-06-26 | Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . |
CVE-2020-9629 | Medium | 5.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9626 | Low | 3.3 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9624 | Medium | 5.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9623 | High | 7.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9622 | Medium | 5.5 | 2020-06-26 | Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information d… |
CVE-2020-9617 | Medium | 5.5 | 2020-06-26 | Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-9616 | Medium | 5.5 | 2020-06-26 | Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-10769 | Medium | 5.5 | 2020-06-26 | A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's mod… |
CVE-2020-9661 | High | 7.8 | 2020-06-25 | Adobe After Effects versions 17.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2020-9655 | High | 7.8 | 2020-06-25 | Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2020-9652 | High | 7.8 | 2020-06-25 | Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2020-9618 | Medium | 5.5 | 2020-06-25 | Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-9609 | Medium | 5.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9608 | Medium | 5.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9603 | Medium | 5.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9602 | Medium | 5.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9601 | High | 7.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9600 | High | 7.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9599 | High | 7.5 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an ou… |
CVE-2020-9666 | Medium | 5.5 | 2020-06-25 | Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-11538 | High | 8.1 | 2020-06-25 | In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-… |
CVE-2020-10994 | Medium | 5.5 | 2020-06-25 | In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file. |
CVE-2020-10378 | Medium | 5.5 | 2020-06-25 | In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond stat… |
CVE-2020-10177 | Medium | 5.5 | 2020-06-25 | Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. |
CVE-2020-3970 | Low | 3.8 | 2020-06-25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and F… |
CVE-2020-3965 | Medium | 5.5 | 2020-06-25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and F… |
CVE-2020-5965 | Medium | 5.5 | 2020-06-25 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted sha… |
CVE-2020-12864 | Medium | 4.3 | 2020-06-24 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati… |
CVE-2020-12863 | Medium | 4.3 | 2020-06-24 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati… |
CVE-2020-12862 | Medium | 4.3 | 2020-06-24 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati… |
CVE-2020-4033 | Low | 3.1 | 2020-06-22 | In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. T… |
CVE-2020-4030 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fix… |
CVE-2020-11099 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of… |
CVE-2020-11098 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is… |
CVE-2020-11097 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PR… |
CVE-2020-11096 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-ca… |
CVE-2020-11095 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PR… |
CVE-2020-3658 | Critical | 9.1 | 2020-06-22 | Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2020-12886 | Critical | 9.1 | 2020-06-18 | A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_… |
CVE-2020-12884 | Critical | 9.1 | 2020-06-18 | A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_… |
CVE-2020-12883 | Critical | 9.1 | 2020-06-18 | Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_… |
CVE-2020-11914 | Medium | 4.3 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read. |
CVE-2020-11913 | Medium | 5.3 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. |
CVE-2020-11912 | Medium | 5.3 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read. |
CVE-2020-11910 | Medium | 5.3 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read. |
CVE-2020-11905 | Medium | 6.5 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read. |
CVE-2020-11903 | Medium | 6.5 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read. |
CVE-2020-11902 | High | 7.3 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read. |
CVE-2020-11901 | Critical | 9.0 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response. |
CVE-2020-11899 | Medium | 5.4 | 2020-06-17 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. |
CVE-2020-14163 | High | 7.5 | 2020-06-15 | An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbag… |
CVE-2020-14148 | High | 7.5 | 2020-06-15 | The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function. |
CVE-2020-14153 | High | 7.1 | 2020-06-15 | In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers. |
CVE-2019-20838 | High | 7.5 | 2020-06-15 | libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to… |
CVE-2020-8674 | Medium | 5.3 | 2020-06-15 | Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenti… |
CVE-2020-0597 | High | 7.5 | 2020-06-15 | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of… |
CVE-2020-0594 | Critical | 9.8 | 2020-06-15 | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user… |
CVE-2020-13656 | Critical | 9.8 | 2020-06-12 | In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnera… |
CVE-2020-0214 | High | 7.5 | 2020-06-11 | In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information… |
CVE-2020-0212 | Medium | 6.5 | 2020-06-11 | In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2020-0211 | Medium | 6.5 | 2020-06-11 | In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2020-0207 | Medium | 6.5 | 2020-06-11 | In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no… |
CVE-2020-0205 | Medium | 6.5 | 2020-06-11 | In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inform… |
CVE-2020-0200 | Medium | 6.5 | 2020-06-11 | In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosur… |
CVE-2020-0197 | Medium | 5.5 | 2020-06-11 | In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2020-0193 | Medium | 6.5 | 2020-06-11 | In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds read due to a heap buffer overflow. This… |
CVE-2020-0192 | Medium | 6.5 | 2020-06-11 | In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper input validation. This could lead to remo… |
CVE-2020-0191 | Medium | 6.5 | 2020-06-11 | In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information d… |
CVE-2020-0185 | Medium | 5.5 | 2020-06-11 | In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… |
CVE-2020-0182 | Medium | 6.5 | 2020-06-11 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2020-0180 | Medium | 6.5 | 2020-06-11 | In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… |
CVE-2020-0176 | High | 7.5 | 2020-06-11 | In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure w… |
CVE-2020-0167 | Medium | 5.5 | 2020-06-11 | In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additi… |
CVE-2020-0164 | Medium | 4.4 | 2020-06-11 | In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2020-0159 | Medium | 5.5 | 2020-06-11 | In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wit… |
CVE-2020-0158 | Medium | 4.4 | 2020-06-11 | In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2020-0157 | Medium | 4.9 | 2020-06-11 | In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosur… |
CVE-2020-0156 | Medium | 5.5 | 2020-06-11 | In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2020-0154 | Medium | 4.4 | 2020-06-11 | In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure v… |
CVE-2020-0152 | Medium | 4.4 | 2020-06-11 | In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2020-0151 | Medium | 4.4 | 2020-06-11 | In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information d… |
CVE-2020-0149 | Medium | 4.4 | 2020-06-11 | In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2020-0148 | Medium | 4.4 | 2020-06-11 | In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read… |
CVE-2020-0147 | Medium | 4.4 | 2020-06-11 | In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2020-0146 | Medium | 4.4 | 2020-06-11 | In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2020-0145 | Medium | 4.4 | 2020-06-11 | In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2020-0144 | Medium | 4.4 | 2020-06-11 | In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via… |