CWE-125 · Out-of-bounds Read (page 78)
Page 78 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5807 | High | 8.8 | 2018-12-07 | An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds rea… |
CVE-2018-5802 | High | 8.8 | 2018-12-07 | An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploi… |
CVE-2017-16910 | Medium | 6.5 | 2018-12-07 | An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid… |
CVE-2018-18313 | Critical | 9.1 | 2018-12-07 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. |
CVE-2018-9566 | Medium | 5.7 | 2018-12-06 | In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2018-9565 | High | 7.5 | 2018-12-06 | In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no addi… |
CVE-2018-9562 | High | 7.5 | 2018-12-06 | In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure… |
CVE-2018-9538 | High | 7.8 | 2018-12-06 | In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an i… |
CVE-2018-19843 | Medium | 5.5 | 2018-12-04 | opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as dem… |
CVE-2018-19842 | Medium | 5.5 | 2018-12-04 | getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assemb… |
CVE-2018-19841 | Medium | 5.5 | 2018-12-04 | The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds rea… |
CVE-2018-19839 | Medium | 6.5 | 2018-12-04 | In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-… |
CVE-2018-16855 | High | 7.5 | 2018-12-03 | An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while co… |
CVE-2018-19763 | Medium | 5.5 | 2018-11-30 | There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19761 | Medium | 5.5 | 2018-11-30 | There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19759 | Medium | 5.5 | 2018-11-30 | There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19758 | Medium | 6.5 | 2018-11-30 | There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. |
CVE-2018-19756 | Medium | 5.5 | 2018-11-30 | There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19497 | Medium | 6.5 | 2018-11-29 | In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to c… |
CVE-2018-15980 | High | 7.5 | 2018-11-29 | Adobe Photoshop CC versions 19.1.6 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2018-15978 | High | 7.5 | 2018-11-29 | Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2018-8789 | High | 7.5 | 2018-11-29 | FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault). |
CVE-2018-19664 | Medium | 6.5 | 2018-11-29 | libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg. |
CVE-2018-19662 | High | 8.1 | 2018-11-29 | An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service. |
CVE-2018-19661 | Medium | 6.5 | 2018-11-29 | An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service. |
CVE-2018-19627 | High | 7.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary. |
CVE-2018-19626 | Medium | 5.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination. |
CVE-2018-19625 | Medium | 5.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based bu… |
CVE-2018-5916 | Medium | 6.5 | 2018-11-28 | Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear… |
CVE-2017-18315 | High | 7.8 | 2018-11-28 | Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600. |
CVE-2017-11078 | High | 7.8 | 2018-11-27 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bo… |
CVE-2018-19566 | High | 7.1 | 2018-11-26 | A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles… |
CVE-2018-19565 | High | 7.1 | 2018-11-26 | A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles t… |
CVE-2018-19543 | High | 7.8 | 2018-11-26 | An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c. |
CVE-2018-19541 | High | 8.8 | 2018-11-26 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.2… |
CVE-2018-19535 | Medium | 6.5 | 2018-11-26 | In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer o… |
CVE-2018-19519 | Medium | 5.5 | 2018-11-25 | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
CVE-2018-19517 | Medium | 5.5 | 2018-11-24 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf. |
CVE-2018-19504 | High | 7.8 | 2018-11-23 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c. |
CVE-2018-19416 | High | 7.8 | 2018-11-21 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf. |
CVE-2018-19390 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF d… |
CVE-2018-19389 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP da… |
CVE-2018-19388 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read, access violation, and application crash)… |
CVE-2018-19353 | Medium | 6.5 | 2018-11-18 | The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read and application cras… |
CVE-2018-19348 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19347 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19346 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19345 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19344 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19343 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19342 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-19341 | High | 7.1 | 2018-11-17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-18954 | Medium | 5.5 | 2018-11-15 | The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory. |
CVE-2015-9274 | Medium | 6.5 | 2018-11-15 | HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mis… |
CVE-2018-9544 | Medium | 5.5 | 2018-11-14 | In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Blu… |
CVE-2018-9542 | High | 7.5 | 2018-11-14 | In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2018-9541 | High | 7.5 | 2018-11-14 | In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2018-9540 | High | 7.5 | 2018-11-14 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis… |
CVE-2018-6071 | High | 8.8 | 2018-11-14 | An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2018-6069 | Medium | 6.5 | 2018-11-14 | Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2018-6067 | High | 8.8 | 2018-11-14 | Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2018-17469 | High | 8.8 | 2018-11-14 | Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via… |
CVE-2018-17466 | High | 8.8 | 2018-11-14 | Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML… |
CVE-2018-19218 | Medium | 6.5 | 2018-11-12 | In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack. |
CVE-2018-19215 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! character… |
CVE-2018-19214 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input. |
CVE-2018-19128 | Medium | 6.5 | 2018-11-09 | In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted a… |
CVE-2018-19107 | Medium | 6.5 | 2018-11-08 | In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer… |
CVE-2018-19077 | High | 7.5 | 2018-11-07 | An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to c… |
CVE-2018-19059 | Medium | 6.5 | 2018-11-07 | An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by u… |
CVE-2018-9455 | High | 7.5 | 2018-11-06 | In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2018-9454 | Medium | 5.5 | 2018-11-06 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9453 | Medium | 5.5 | 2018-11-06 | In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2018-9451 | Medium | 5.5 | 2018-11-06 | In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2018-9448 | High | 7.5 | 2018-11-06 | In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9437 | Medium | 5.5 | 2018-11-06 | In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional ex… |
CVE-2018-9436 | High | 7.5 | 2018-11-06 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2018-9361 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9360 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9359 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9358 | High | 7.5 | 2018-11-06 | In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote informati… |
CVE-2018-18933 | Critical | 9.1 | 2018-11-05 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (ou… |
CVE-2018-16847 | High | 7.8 | 2018-11-02 | An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest… |
CVE-2018-16842 | Medium | 4.4 | 2018-10-31 | Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure… |
CVE-2018-18827 | Medium | 6.5 | 2018-10-30 | There exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aa… |
CVE-2018-17622 | Medium | 6.5 | 2018-10-29 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is requir… |
CVE-2017-18281 | Medium | 5.5 | 2018-10-29 | A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF… |
CVE-2018-18765 | Critical | 9.1 | 2018-10-29 | An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-rea… |
CVE-2018-18764 | Critical | 9.1 | 2018-10-29 | An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-rea… |
CVE-2018-18662 | Medium | 5.5 | 2018-10-26 | There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool. |
CVE-2018-18605 | Medium | 5.5 | 2018-10-23 | A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), a… |
CVE-2017-18304 | High | 7.8 | 2018-10-23 | Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdr… |
CVE-2017-18294 | High | 7.8 | 2018-10-23 | While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC… |
CVE-2018-18581 | High | 8.8 | 2018-10-22 | An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c. |
CVE-2018-18398 | Medium | 4.7 | 2018-10-19 | Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and… |
CVE-2018-18224 | High | 8.1 | 2018-10-19 | A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform… |
CVE-2018-18481 | Medium | 6.5 | 2018-10-18 | A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadCHAR function in lib/dwg/io.cpp, resulting in an application crash. |
CVE-2018-18480 | Medium | 6.5 | 2018-10-18 | A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash. |
CVE-2018-12366 | Medium | 6.5 | 2018-10-18 | An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private dat… |
CVE-2018-18456 | Medium | 5.5 | 2018-10-18 | The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buf… |