CWE-125 · Out-of-bounds Read (page 69)
Page 69 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8693 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted m… |
CVE-2019-8692 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted m… |
CVE-2019-8691 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted m… |
CVE-2019-8657 | High | 8.8 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. Parsing a ma… |
CVE-2019-8646 | High | 7.5 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote att… |
CVE-2019-8641 | Critical | 9.8 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. |
CVE-2019-8624 | High | 7.5 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attacker may be able to leak memory. |
CVE-2019-8615 | Medium | 6.5 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1… |
CVE-2019-8607 | Medium | 6.5 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12… |
CVE-2019-8603 | High | 8.8 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted m… |
CVE-2019-8585 | High | 8.8 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. Processing… |
CVE-2019-8576 | High | 7.1 | 2019-12-18 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local use… |
CVE-2019-8560 | Medium | 5.5 | 2019-12-18 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious… |
CVE-2019-8520 | Medium | 5.5 | 2019-12-18 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read res… |
CVE-2019-8519 | Medium | 5.5 | 2019-12-18 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An application may be able to read restricted m… |
CVE-2019-8517 | Medium | 6.5 | 2019-12-18 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a… |
CVE-2019-8510 | Medium | 5.5 | 2019-12-18 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS… |
CVE-2019-6207 | Medium | 5.5 | 2019-12-18 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS… |
CVE-2019-10584 | High | 7.8 | 2019-12-18 | Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2019-10564 | High | 7.8 | 2019-12-18 | Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-10557 | Critical | 9.8 | 2019-12-18 | Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connect… |
CVE-2019-10516 | Critical | 9.8 | 2019-12-18 | Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu… |
CVE-2019-10487 | Critical | 9.8 | 2019-12-18 | Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-19818 | Medium | 5.5 | 2019-12-16 | The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via… |
CVE-2019-5255 | Medium | 5.5 | 2019-12-13 | Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG630… |
CVE-2019-5254 | High | 8.6 | 2019-12-13 | Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG630… |
CVE-2019-5278 | Medium | 6.5 | 2019-12-13 | There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attacker… |
CVE-2019-19778 | High | 8.8 | 2019-12-13 | An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c. |
CVE-2019-19777 | High | 8.8 | 2019-12-13 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main. |
CVE-2019-18307 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18306 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-2337 | High | 7.5 | 2019-12-12 | While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdr… |
CVE-2019-2310 | High | 7.5 | 2019-12-12 | Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto… |
CVE-2019-10559 | Critical | 9.8 | 2019-12-12 | Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snap… |
CVE-2019-5090 | High | 7.5 | 2019-12-12 | An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specia… |
CVE-2019-1481 | Medium | 4.3 | 2019-12-10 | An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Informatio… |
CVE-2019-1480 | Medium | 4.3 | 2019-12-10 | An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Informatio… |
CVE-2019-1466 | Medium | 6.5 | 2019-12-10 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-1465 | Medium | 6.5 | 2019-12-10 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-13753 | Medium | 6.5 | 2019-12-10 | Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2019-13752 | Medium | 6.5 | 2019-12-10 | Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2019-19648 | High | 7.8 | 2019-12-09 | In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can… |
CVE-2019-19449 | High | 7.8 | 2019-12-08 | In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segmen… |
CVE-2019-2228 | Medium | 5.5 | 2019-12-06 | In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the print… |
CVE-2019-2227 | Medium | 6.5 | 2019-12-06 | In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure over Bluetooth with… |
CVE-2019-2226 | Medium | 5.5 | 2019-12-06 | In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in t… |
CVE-2019-19624 | Medium | 6.5 | 2019-12-06 | An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale withi… |
CVE-2019-5098 | High | 8.6 | 2019-12-05 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of… |
CVE-2019-11935 | Critical | 9.8 | 2019-12-04 | Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30… |
CVE-2019-11934 | Critical | 9.8 | 2019-12-04 | Improper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00. |
CVE-2012-4428 | High | 7.5 | 2019-12-02 | openslp: SLPIntersectStringList()' Function has a DoS vulnerability |
CVE-2019-19479 | Medium | 5.5 | 2019-12-01 | An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SET… |
CVE-2019-5224 | Medium | 5.5 | 2019-11-29 | P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. The system does not properly validate c… |
CVE-2019-19307 | Critical | 9.8 | 2019-11-26 | An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-… |
CVE-2019-19275 | High | 7.5 | 2019-11-26 | typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but n… |
CVE-2019-19274 | High | 7.5 | 2019-11-26 | typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (… |
CVE-2019-19252 | High | 7.8 | 2019-11-25 | vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a. |
CVE-2019-19246 | High | 7.5 | 2019-11-25 | Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c. |
CVE-2019-5881 | High | 8.1 | 2019-11-25 | Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive information from process mem… |
CVE-2019-5867 | Medium | 6.5 | 2019-11-25 | Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2019-5849 | High | 8.1 | 2019-11-25 | Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensitive information from process memory via… |
CVE-2019-19221 | Medium | 5.5 | 2019-11-21 | In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example… |
CVE-2019-19204 | High | 7.5 | 2019-11-21 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c… |
CVE-2019-19203 | High | 7.5 | 2019-11-21 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without check… |
CVE-2019-2318 | Medium | 5.5 | 2019-11-21 | Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2019-2303 | Critical | 9.8 | 2019-11-21 | SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2019-2271 | Critical | 9.8 | 2019-11-21 | Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-2268 | Critical | 9.8 | 2019-11-21 | Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CVE-2019-10563 | High | 7.8 | 2019-11-21 | Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Con… |
CVE-2019-19035 | Medium | 5.5 | 2019-11-17 | jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The… |
CVE-2019-19012 | Critical | 9.8 | 2019-11-17 | An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this… |
CVE-2019-14574 | Medium | 5.5 | 2019-11-14 | Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of s… |
CVE-2019-11181 | High | 7.8 | 2019-11-14 | Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via netw… |
CVE-2019-11172 | Medium | 5.3 | 2019-11-14 | Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via netwo… |
CVE-2019-8244 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8243 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8242 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8241 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-2212 | Medium | 5.5 | 2019-11-13 | In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges need… |
CVE-2019-2209 | Medium | 5.5 | 2019-11-13 | In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wi… |
CVE-2019-2208 | High | 7.5 | 2019-11-13 | In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation… |
CVE-2019-2204 | Critical | 9.8 | 2019-11-13 | In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code execution in… |
CVE-2019-5294 | High | 7.5 | 2019-11-13 | There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected p… |
CVE-2019-5289 | High | 7.5 | 2019-11-13 | Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet lengt… |
CVE-2019-1432 | Medium | 6.5 | 2019-11-12 | An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner… |
CVE-2019-1412 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory, aka 'O… |
CVE-2019-1411 | Medium | 6.5 | 2019-11-12 | An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner… |
CVE-2019-18849 | Medium | 5.5 | 2019-11-11 | In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/… |
CVE-2014-3180 | Critical | 9.1 | 2019-11-06 | In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall use… |
CVE-2019-2283 | Critical | 9.8 | 2019-11-06 | Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compu… |
CVE-2019-2249 | Critical | 9.8 | 2019-11-06 | Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-10542 | Critical | 9.8 | 2019-11-06 | Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snap… |
CVE-2019-10505 | Critical | 9.8 | 2019-11-06 | Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer… |
CVE-2019-18798 | Medium | 6.5 | 2019-11-06 | LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp. |
CVE-2019-1789 | High | 7.5 | 2019-11-05 | ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE fi… |
CVE-2019-16675 | High | 7.8 | 2019-10-31 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ proje… |
CVE-2019-15682 | High | 7.5 | 2019-10-30 | RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attac… |
CVE-2019-10209 | Low | 2.2 | 2019-10-29 | Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan. |
CVE-2019-0210 | High | 7.5 | 2019-10-29 | In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. |
CVE-2019-17138 | Medium | 4.3 | 2019-10-25 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is req… |