CWE-125 · Out-of-bounds Read (page 73)
Page 73 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-2301 | High | 7.8 | 2019-07-25 | Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In… |
CVE-2019-2276 | Critical | 9.8 | 2019-07-25 | Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Au… |
CVE-2019-2273 | High | 7.5 | 2019-07-25 | IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… |
CVE-2019-2253 | Critical | 9.8 | 2019-07-25 | Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap… |
CVE-2019-10992 | Medium | 5.5 | 2019-07-24 | Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking… |
CVE-2019-1010190 | Medium | 5.5 | 2019-07-24 | mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan… |
CVE-2019-1010180 | High | 7.8 | 2019-07-24 | GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Executi… |
CVE-2019-11719 | High | 7.5 | 2019-07-23 | When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Servic… |
CVE-2019-1010204 | Medium | 5.5 | 2019-07-23 | GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The… |
CVE-2019-1010169 | High | 7.5 | 2019-07-23 | Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). The attack v… |
CVE-2019-1010220 | Low | 3.3 | 2019-07-22 | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component… |
CVE-2019-2277 | High | 7.8 | 2019-07-22 | Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S… |
CVE-2019-7963 | Medium | 6.5 | 2019-07-18 | Adobe Bridge CC version 9.0.2 and earlier versions have an out of bound read vulnerability. Successful exploitation could lead to Information Disclosure in the… |
CVE-2019-13962 | Critical | 9.8 | 2019-07-18 | lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly val… |
CVE-2019-3972 | Medium | 5.5 | 2019-07-17 | Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>_CisSharedM… |
CVE-2019-13626 | Medium | 6.5 | 2019-07-17 | SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode()… |
CVE-2019-13115 | High | 8.1 | 2019-07-16 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read… |
CVE-2019-13618 | High | 7.5 | 2019-07-16 | In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c. |
CVE-2019-13617 | Medium | 6.5 | 2019-07-16 | njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regex… |
CVE-2019-13616 | High | 8.1 | 2019-07-16 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_So… |
CVE-2019-13615 | Medium | 5.5 | 2019-07-16 | libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextE… |
CVE-2019-1010295 | Critical | 9.8 | 2019-07-15 | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure of memory content. The component is: op… |
CVE-2019-1010004 | Medium | 5.5 | 2019-07-15 | SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:2… |
CVE-2019-12529 | Medium | 5.9 | 2019-07-11 | An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Pr… |
CVE-2019-13504 | Medium | 6.5 | 2019-07-11 | There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2. |
CVE-2019-13503 | High | 7.5 | 2019-07-11 | mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read. |
CVE-2019-13470 | Critical | 9.8 | 2019-07-09 | MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling. |
CVE-2019-2116 | High | 7.5 | 2019-07-08 | In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2019-13391 | High | 8.8 | 2019-07-07 | In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels. |
CVE-2019-13312 | High | 8.8 | 2019-07-05 | block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read. |
CVE-2019-13303 | High | 8.8 | 2019-07-05 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage. |
CVE-2019-13302 | High | 8.8 | 2019-07-05 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages. |
CVE-2019-13299 | High | 8.8 | 2019-07-05 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel. |
CVE-2019-13297 | High | 8.8 | 2019-07-05 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled. |
CVE-2019-13295 | High | 8.8 | 2019-07-05 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled. |
CVE-2019-13291 | Medium | 5.5 | 2019-07-04 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sendin… |
CVE-2019-13287 | Medium | 5.5 | 2019-07-04 | In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example… |
CVE-2019-13286 | Medium | 5.5 | 2019-07-04 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc. It can, for example, be tri… |
CVE-2019-13283 | High | 7.8 | 2019-07-04 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source s… |
CVE-2019-13282 | High | 7.8 | 2019-07-04 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when using a large index for samples. It can, fo… |
CVE-2019-10975 | Medium | 6.6 | 2019-07-02 | An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which may crash the system. |
CVE-2019-13110 | Medium | 6.5 | 2019-06-30 | A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a… |
CVE-2019-13067 | Critical | 9.8 | 2019-06-30 | njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. |
CVE-2019-10983 | High | 7.5 | 2019-06-28 | In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation o… |
CVE-2019-5835 | Medium | 6.5 | 2019-06-27 | Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2018-6142 | Medium | 6.5 | 2019-06-27 | Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF fil… |
CVE-2018-6136 | Medium | 6.5 | 2019-06-27 | Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2018-6130 | Medium | 6.5 | 2019-06-27 | Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory a… |
CVE-2018-6129 | Medium | 6.5 | 2019-06-27 | Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2018-16069 | Medium | 6.5 | 2019-06-27 | Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a cr… |
CVE-2019-12972 | Medium | 5.5 | 2019-06-26 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read i… |
CVE-2019-12958 | Medium | 5.5 | 2019-06-25 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second pr… |
CVE-2019-12957 | High | 7.8 | 2019-06-25 | In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset arr… |
CVE-2019-12869 | High | 8.8 | 2019-06-24 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ proje… |
CVE-2019-6964 | High | 8.8 | 2019-06-20 | A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers wit… |
CVE-2019-12897 | High | 7.5 | 2019-06-19 | Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074. |
CVE-2019-12894 | High | 7.5 | 2019-06-19 | Alternate Pic View 2.600 has a Read Access Violation at the Instruction Pointer after a call from PicViewer!PerfgrapFinalize+0x00000000000a9a1b. |
CVE-2019-2022 | Medium | 6.5 | 2019-06-19 | In rw_t3t_act_handle_fmt_rsp and rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead t… |
CVE-2019-2021 | Medium | 6.5 | 2019-06-19 | In rw_t3t_act_handle_ndef_detect_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information di… |
CVE-2019-2020 | Medium | 6.5 | 2019-06-19 | In llcp_dlc_proc_rr_rnr_pdu of llcp_dlc.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2019-2019 | Medium | 6.5 | 2019-06-19 | In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9564 | Medium | 6.5 | 2019-06-19 | In llcp_util_parse_link_params of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information discl… |
CVE-2018-9563 | Medium | 6.5 | 2019-06-19 | In llcp_util_parse_cc of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2018-9561 | Medium | 6.5 | 2019-06-19 | In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2019-11040 | Critical | 9.1 | 2019-06-19 | When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 a… |
CVE-2019-11039 | Critical | 9.1 | 2019-06-19 | Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer… |
CVE-2018-6350 | Critical | 9.8 | 2019-06-14 | An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, Wh… |
CVE-2018-13911 | Critical | 9.8 | 2019-06-14 | Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd… |
CVE-2018-13910 | High | 7.8 | 2019-06-14 | Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Co… |
CVE-2018-11955 | Critical | 9.8 | 2019-06-14 | Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Sn… |
CVE-2019-11129 | Medium | 6.7 | 2019-06-13 | Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service an… |
CVE-2019-11124 | Medium | 6.7 | 2019-06-13 | Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service an… |
CVE-2019-12790 | High | 7.8 | 2019-06-10 | In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote attackers to cause a de… |
CVE-2019-3957 | High | 7.4 | 2019-06-07 | Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSigna… |
CVE-2019-3956 | High | 7.4 | 2019-06-07 | Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPub… |
CVE-2019-2101 | Medium | 5.5 | 2019-06-07 | In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information dis… |
CVE-2019-5522 | High | 7.1 | 2019-06-06 | VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This… |
CVE-2019-12555 | High | 7.5 | 2019-06-05 | In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function (provided by the scripting engine) allow… |
CVE-2019-12554 | High | 7.5 | 2019-06-05 | In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function (provided by the scripting engine) allo… |
CVE-2019-5296 | Low | 3.9 | 2019-06-04 | Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability. An attacker with a high permission runs some specific… |
CVE-2019-12727 | High | 7.5 | 2019-06-04 | On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service provided by the ubnt-streamer binary. The issue can be triggered… |
CVE-2019-6765 | High | 7.8 | 2019-06-03 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required… |
CVE-2019-6752 | Medium | 5.5 | 2019-06-03 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF 9.3.10826. User interaction is req… |
CVE-2019-6746 | Medium | 5.5 | 2019-06-03 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is requi… |
CVE-2019-12515 | High | 7.1 | 2019-06-02 | There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by… |
CVE-2019-12493 | High | 7.1 | 2019-05-31 | A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparationColorSpace and GfxDeviceNColorSpace… |
CVE-2019-12480 | High | 7.5 | 2019-05-30 | BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a malformed DCC in AtomicWriteFile, Atom… |
CVE-2019-8457 | Critical | 9.8 | 2019-05-30 | SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables. |
CVE-2019-12360 | High | 7.1 | 2019-05-27 | A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted… |
CVE-2019-7090 | Medium | 6.5 | 2019-05-24 | Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Ed… |
CVE-2019-7081 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7074 | Medium | 6.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7073 | Medium | 6.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7071 | Medium | 6.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7067 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7065 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7064 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7063 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7059 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7058 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |