CWE-125 · Out-of-bounds Read (page 70)
Page 70 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8218 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8216 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8207 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8204 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8202 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8201 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8198 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8194 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8193 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8190 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8189 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8185 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8184 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8182 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8173 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8172 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8168 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8166 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8164 | High | 7.5 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8163 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8064 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-17595 | Medium | 5.4 | 2019-10-14 | There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. |
CVE-2019-17594 | Medium | 5.3 | 2019-10-14 | There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. |
CVE-2019-17544 | Critical | 9.1 | 2019-10-14 | libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character. |
CVE-2019-17533 | High | 8.2 | 2019-10-13 | Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized me… |
CVE-2019-17530 | High | 7.8 | 2019-10-12 | An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4_Cenc… |
CVE-2019-17529 | High | 7.8 | 2019-10-12 | An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp… |
CVE-2019-2187 | Medium | 5.5 | 2019-10-11 | In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosur… |
CVE-2019-17455 | Critical | 9.8 | 2019-10-10 | Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demons… |
CVE-2019-1361 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Infor… |
CVE-2019-1347 | Medium | 6.5 | 2019-10-10 | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu… |
CVE-2019-1346 | Medium | 6.5 | 2019-10-10 | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu… |
CVE-2019-1345 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2019-1344 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module… |
CVE-2019-17401 | Low | 3.3 | 2019-10-09 | libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_location_information_read_data in liblnk_loca… |
CVE-2019-17362 | Critical | 9.1 | 2019-10-09 | In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This… |
CVE-2019-17260 | High | 7.8 | 2019-10-08 | MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpc_hc!memcpy+0x000000000000004e. |
CVE-2019-13120 | High | 7.5 | 2019-10-07 | Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents o… |
CVE-2019-17266 | Critical | 9.8 | 2019-10-06 | libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an… |
CVE-2019-17264 | Low | 3.3 | 2019-10-06 | In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect… |
CVE-2019-17263 | Low | 3.3 | 2019-10-06 | In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejecti… |
CVE-2019-13331 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13326 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13325 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to… |
CVE-2019-13324 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to… |
CVE-2018-16451 | High | 7.5 | 2019-10-03 | The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
CVE-2018-16230 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
CVE-2018-16229 | High | 7.5 | 2019-10-03 | The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
CVE-2018-16228 | High | 7.5 | 2019-10-03 | The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
CVE-2018-16227 | High | 7.5 | 2019-10-03 | The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
CVE-2018-14882 | High | 7.5 | 2019-10-03 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
CVE-2018-14881 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
CVE-2018-14880 | High | 7.5 | 2019-10-03 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
CVE-2018-14470 | High | 7.5 | 2019-10-03 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
CVE-2018-14469 | High | 7.5 | 2019-10-03 | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
CVE-2018-14468 | High | 7.5 | 2019-10-03 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
CVE-2018-14467 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
CVE-2018-14466 | High | 7.5 | 2019-10-03 | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
CVE-2018-14465 | High | 7.5 | 2019-10-03 | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2018-14464 | High | 7.5 | 2019-10-03 | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
CVE-2018-14463 | High | 7.5 | 2019-10-03 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
CVE-2018-14462 | High | 7.5 | 2019-10-03 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2018-14461 | High | 7.5 | 2019-10-03 | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
CVE-2019-3728 | High | 7.5 | 2019-09-30 | RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0… |
CVE-2019-10507 | High | 7.8 | 2019-09-30 | Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivi… |
CVE-2019-17040 | Critical | 9.8 | 2019-09-30 | contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled. |
CVE-2019-9462 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9435 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… |
CVE-2019-9434 | Medium | 4.9 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information writ… |
CVE-2019-9432 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server… |
CVE-2019-9431 | Medium | 4.9 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to… |
CVE-2019-9425 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2019-9422 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9421 | Medium | 5.0 | 2019-09-27 | In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileg… |
CVE-2019-9420 | Medium | 6.5 | 2019-09-27 | In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privile… |
CVE-2019-9419 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9417 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… |
CVE-2019-9413 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9412 | Medium | 6.5 | 2019-09-27 | In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote information disclosure with no additional executio… |
CVE-2019-9403 | Medium | 6.5 | 2019-09-27 | In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privi… |
CVE-2019-9391 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges… |
CVE-2019-9390 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2019-9389 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2019-9388 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service w… |
CVE-2019-9387 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9385 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2019-9383 | Medium | 5.0 | 2019-09-27 | In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2019-9381 | High | 7.5 | 2019-09-27 | In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileg… |
CVE-2019-9370 | Medium | 6.5 | 2019-09-27 | In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execut… |
CVE-2019-9368 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… |
CVE-2019-9367 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9366 | Medium | 6.5 | 2019-09-27 | In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executio… |
CVE-2019-9362 | Medium | 6.5 | 2019-09-27 | In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9360 | Medium | 4.4 | 2019-09-27 | In the TEE, there's a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2019-9356 | Medium | 5.0 | 2019-09-27 | In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2019-9355 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9354 | Medium | 6.5 | 2019-09-27 | In NFC server, there's a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution priv… |
CVE-2019-9353 | Medium | 6.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9347 | Medium | 5.5 | 2019-09-27 | In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execu… |
CVE-2019-9344 | Medium | 5.0 | 2019-09-27 | In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |