CWE-125 · Out-of-bounds Read (page 73)
Page 73 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8877 | Medium | 4.3 | 2020-03-20 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is req… |
CVE-2019-15664 | Low | 2.7 | 2020-03-20 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter duri… |
CVE-2019-15663 | Low | 2.7 | 2020-03-20 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter duri… |
CVE-2019-15662 | Low | 2.7 | 2020-03-20 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter duri… |
CVE-2020-10597 | High | 7.1 | 2020-03-20 | Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted… |
CVE-2020-6976 | Medium | 5.5 | 2020-03-18 | Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially craft… |
CVE-2019-19945 | High | 7.5 | 2020-03-16 | uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subse… |
CVE-2019-9474 | High | 7.5 | 2020-03-15 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9473 | High | 7.5 | 2020-03-15 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-2088 | Medium | 5.5 | 2020-03-15 | In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional executio… |
CVE-2019-2058 | Medium | 6.5 | 2020-03-15 | In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additional execution privileges needed. User in… |
CVE-2020-1863 | High | 7.5 | 2020-03-12 | Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a… |
CVE-2020-0057 | Medium | 5.5 | 2020-03-10 | In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2020-0056 | Medium | 5.5 | 2020-03-10 | In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2020-0055 | Medium | 5.5 | 2020-03-10 | In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… |
CVE-2020-0059 | Medium | 5.5 | 2020-03-10 | In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2020-0058 | Medium | 4.4 | 2020-03-10 | In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wi… |
CVE-2020-0044 | Medium | 4.4 | 2020-03-10 | In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with Sy… |
CVE-2020-0043 | Medium | 4.4 | 2020-03-10 | In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2020-0042 | Medium | 4.4 | 2020-03-10 | In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… |
CVE-2020-0039 | High | 7.5 | 2020-03-10 | In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disc… |
CVE-2020-0038 | High | 7.5 | 2020-03-10 | In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disc… |
CVE-2020-0037 | High | 7.5 | 2020-03-10 | In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2020-0034 | High | 7.5 | 2020-03-10 | In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure… |
CVE-2020-5254 | Low | 3.9 | 2020-03-10 | In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue. |
CVE-2020-10251 | Medium | 5.5 | 2020-03-10 | In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with… |
CVE-2020-10233 | Critical | 9.1 | 2020-03-09 | In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c. |
CVE-2019-20503 | Medium | 6.5 | 2020-03-06 | usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init. |
CVE-2019-14082 | Critical | 9.1 | 2020-03-05 | Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectiv… |
CVE-2019-14081 | High | 7.1 | 2020-03-05 | Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Ele… |
CVE-2019-14048 | High | 7.8 | 2020-03-05 | Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In… |
CVE-2019-10577 | Critical | 9.1 | 2020-03-05 | Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdragon Auto, Sn… |
CVE-2019-10554 | Critical | 9.1 | 2020-03-05 | Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while lo… |
CVE-2019-10553 | Critical | 9.1 | 2020-03-05 | Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10552 | Critical | 9.1 | 2020-03-05 | Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdra… |
CVE-2019-10550 | Critical | 9.1 | 2020-03-05 | Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2020-1893 | High | 7.5 | 2020-03-03 | Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.4… |
CVE-2020-1892 | High | 8.1 | 2020-03-03 | Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. Thi… |
CVE-2020-1888 | High | 7.5 | 2020-03-03 | Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44… |
CVE-2020-1873 | High | 7.5 | 2020-02-28 | NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unau… |
CVE-2020-9428 | High | 7.5 | 2020-02-27 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using mo… |
CVE-2020-7061 | Medium | 6.5 | 2020-02-27 | In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could l… |
CVE-2020-3878 | High | 7.8 | 2020-02-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watch… |
CVE-2020-3877 | High | 7.5 | 2020-02-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able… |
CVE-2020-3875 | Medium | 5.5 | 2020-02-27 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, wa… |
CVE-2020-3870 | High | 7.8 | 2020-02-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, w… |
CVE-2020-3829 | High | 7.8 | 2020-02-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, wa… |
CVE-2020-3826 | High | 7.8 | 2020-02-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, w… |
CVE-2017-6363 | High | 8.1 | 2020-02-27 | In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion t… |
CVE-2020-8794 | Critical | 9.8 | 2020-02-25 | OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerabi… |
CVE-2020-9383 | High | 7.1 | 2020-02-25 | An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC… |
CVE-2019-5148 | High | 7.5 | 2020-02-25 | An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet ca… |
CVE-2020-9365 | High | 7.5 | 2020-02-24 | An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c. |
CVE-2020-9272 | High | 7.5 | 2020-02-20 | ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function. |
CVE-2020-6061 | Critical | 9.8 | 2020-02-19 | An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request ca… |
CVE-2015-7507 | High | 7.5 | 2020-02-18 | libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_deco… |
CVE-2015-7506 | Medium | 6.5 | 2020-02-18 | The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application c… |
CVE-2020-1830 | Medium | 5.3 | 2020-02-18 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C… |
CVE-2020-1828 | High | 7.5 | 2020-02-17 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R… |
CVE-2020-8852 | Low | 3.3 | 2020-02-14 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User interaction is require… |
CVE-2019-20454 | High | 7.5 | 2020-02-14 | An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. App… |
CVE-2020-3755 | High | 7.5 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an ou… |
CVE-2020-3747 | High | 7.5 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an ou… |
CVE-2020-3744 | High | 7.5 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an ou… |
CVE-2020-0744 | Medium | 5.5 | 2020-02-11 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to r… |
CVE-2020-5831 | Low | 3.3 | 2020-02-11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results… |
CVE-2020-5830 | Low | 3.3 | 2020-02-11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results… |
CVE-2020-5829 | Low | 3.3 | 2020-02-11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results… |
CVE-2020-5828 | Low | 3.3 | 2020-02-11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results… |
CVE-2020-5827 | Low | 3.3 | 2020-02-11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results… |
CVE-2020-5826 | Medium | 5.5 | 2020-02-11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respect… |
CVE-2020-6405 | Medium | 6.5 | 2020-02-11 | Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2020-6395 | Medium | 6.5 | 2020-02-11 | Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memo… |
CVE-2020-7060 | Medium | 6.5 | 2020-02-10 | When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possib… |
CVE-2020-7059 | Medium | 6.5 | 2020-02-10 | When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to s… |
CVE-2019-17136 | High | 7.8 | 2020-02-08 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-14063 | Critical | 9.1 | 2020-02-07 | Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2019-14057 | Critical | 9.1 | 2020-02-07 | Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2016-7524 | Medium | 6.5 | 2020-02-06 | coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7523 | Medium | 6.5 | 2020-02-06 | coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2020-3123 | High | 7.5 | 2020-02-05 | A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remot… |
CVE-2020-6058 | Critical | 9.1 | 2020-02-04 | An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trig… |
CVE-2020-5235 | Medium | 6.5 | 2020-02-04 | There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PB_ENABLE_MALLOC, the mes… |
CVE-2019-18567 | Medium | 6.3 | 2020-02-03 | Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of servi… |
CVE-2014-2898 | Critical | 9.8 | 2020-01-28 | wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds r… |
CVE-2014-2897 | Critical | 9.8 | 2020-01-28 | The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to h… |
CVE-2014-2896 | Critical | 9.8 | 2020-01-28 | The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors… |
CVE-2019-20433 | Critical | 9.1 | 2020-01-27 | libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of… |
CVE-2019-20429 | High | 7.5 | 2020-01-27 | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the lack of validation… |
CVE-2019-20428 | High | 7.5 | 2020-01-27 | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sen… |
CVE-2019-5147 | High | 8.6 | 2020-01-25 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can cause a denia… |
CVE-2019-5146 | High | 8.6 | 2020-01-25 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A specially crafted pixel shader can cause a deni… |
CVE-2019-5124 | High | 8.6 | 2020-01-25 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can cause a deni… |
CVE-2019-20387 | High | 7.5 | 2020-01-21 | repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input… |
CVE-2019-14907 | Medium | 6.5 | 2020-01-21 | All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then th… |
CVE-2019-10579 | Critical | 9.1 | 2020-01-21 | Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CVE-2019-10532 | Critical | 9.8 | 2020-01-21 | Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdra… |
CVE-2020-7044 | High | 7.5 | 2020-01-16 | In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one… |
CVE-2020-0615 | Medium | 5.5 | 2020-01-14 | An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Win… |
CVE-2015-2326 | Medium | 5.5 | 2020-01-14 | The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read)… |