CWE-125 · Out-of-bounds Read (page 83)
Page 83 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20712 | Medium | 6.5 | 2019-01-15 | A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input c… |
CVE-2019-6286 | Medium | 6.5 | 2019-01-14 | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a sim… |
CVE-2019-6284 | Medium | 6.5 | 2019-01-14 | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp. |
CVE-2019-6283 | Medium | 6.5 | 2019-01-14 | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp. |
CVE-2019-6246 | Critical | 9.8 | 2019-01-13 | An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library in Boost, the return code is used as an… |
CVE-2018-16866 | Low | 3.3 | 2019-01-11 | An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw… |
CVE-2018-4256 | Medium | 5.5 | 2019-01-11 | In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. |
CVE-2018-4255 | Medium | 5.5 | 2019-01-11 | In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. |
CVE-2018-4194 | High | 8.8 | 2019-01-11 | In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.13.5, an out-of-boun… |
CVE-2018-4169 | Critical | 9.8 | 2019-01-11 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was addressed with improve… |
CVE-2018-6151 | High | 8.8 | 2019-01-09 | Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious exte… |
CVE-2018-6143 | Medium | 6.5 | 2019-01-09 | Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2018-6141 | High | 8.8 | 2019-01-09 | Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to… |
CVE-2018-17461 | High | 8.8 | 2019-01-09 | An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
CVE-2018-16083 | High | 8.8 | 2019-01-09 | An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m… |
CVE-2018-16082 | Medium | 6.5 | 2019-01-09 | An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2018-16076 | High | 8.8 | 2019-01-09 | Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
CVE-2017-15428 | High | 8.8 | 2019-01-09 | Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and… |
CVE-2017-15401 | High | 8.8 | 2019-01-09 | A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a re… |
CVE-2016-10403 | High | 8.8 | 2019-01-09 | Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read v… |
CVE-2019-5747 | High | 7.5 | 2019-01-09 | An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a… |
CVE-2018-20679 | High | 7.5 | 2019-01-09 | An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote at… |
CVE-2019-5718 | Medium | 5.5 | 2019-01-08 | In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a g… |
CVE-2019-5007 | High | 7.1 | 2019-01-03 | An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointe… |
CVE-2018-16885 | Medium | 4.7 | 2019-01-03 | A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which c… |
CVE-2019-3574 | High | 7.8 | 2019-01-02 | In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel. |
CVE-2019-3572 | Medium | 6.5 | 2019-01-02 | An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-lin… |
CVE-2018-6340 | High | 8.1 | 2018-12-31 | The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames an… |
CVE-2018-20618 | High | 8.8 | 2018-12-31 | ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c. |
CVE-2018-20591 | Medium | 6.5 | 2018-12-30 | A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, le… |
CVE-2018-20588 | Medium | 6.5 | 2018-12-30 | lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read. |
CVE-2018-20570 | Medium | 6.5 | 2018-12-28 | jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read. |
CVE-2018-20553 | High | 7.8 | 2018-12-28 | Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c. |
CVE-2018-20552 | High | 7.8 | 2018-12-28 | Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c. |
CVE-2018-20536 | Medium | 6.5 | 2018-12-28 | There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. |
CVE-2018-20461 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds rea… |
CVE-2018-20459 | Medium | 5.5 | 2018-12-25 | In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of… |
CVE-2018-20458 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash cau… |
CVE-2018-20457 | Medium | 5.5 | 2018-12-25 | In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_ca… |
CVE-2018-20456 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr… |
CVE-2018-20453 | Medium | 6.5 | 2018-12-25 | The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (applicati… |
CVE-2018-20451 | Medium | 6.5 | 2018-12-25 | The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (applic… |
CVE-2018-20430 | Medium | 6.5 | 2018-12-24 | GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common… |
CVE-2018-20409 | Medium | 6.5 | 2018-12-23 | An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls. |
CVE-2018-20124 | Medium | 5.5 | 2018-12-20 | hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value. |
CVE-2018-11963 | High | 7.8 | 2018-12-20 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to non-null terminated… |
CVE-2018-1000852 | Medium | 6.5 | 2018-12-20 | FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/cl… |
CVE-2018-20201 | High | 7.8 | 2018-12-18 | There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified… |
CVE-2018-20185 | Medium | 5.3 | 2018-12-17 | In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows atta… |
CVE-2018-19975 | Medium | 5.5 | 2018-12-17 | In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OP_COUNT can… |
CVE-2018-20102 | High | 7.5 | 2018-12-12 | An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, rem… |
CVE-2018-11465 | High | 7.8 | 2018-12-12 | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1… |
CVE-2018-20098 | Medium | 6.5 | 2018-12-12 | There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of s… |
CVE-2018-20096 | Medium | 6.5 | 2018-12-12 | There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of… |
CVE-2018-18359 | High | 8.8 | 2018-12-11 | Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds memory read via a cr… |
CVE-2018-5811 | Medium | 6.5 | 2018-12-07 | An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bou… |
CVE-2018-5807 | High | 8.8 | 2018-12-07 | An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds rea… |
CVE-2018-5802 | High | 8.8 | 2018-12-07 | An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploi… |
CVE-2017-16910 | Medium | 6.5 | 2018-12-07 | An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid… |
CVE-2018-18313 | Critical | 9.1 | 2018-12-07 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. |
CVE-2018-9566 | Medium | 5.7 | 2018-12-06 | In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2018-9565 | High | 7.5 | 2018-12-06 | In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no addi… |
CVE-2018-9562 | High | 7.5 | 2018-12-06 | In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure… |
CVE-2018-9538 | High | 7.8 | 2018-12-06 | In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an i… |
CVE-2018-19843 | Medium | 5.5 | 2018-12-04 | opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as dem… |
CVE-2018-19842 | Medium | 5.5 | 2018-12-04 | getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assemb… |
CVE-2018-19841 | Medium | 5.5 | 2018-12-04 | The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds rea… |
CVE-2018-19839 | Medium | 6.5 | 2018-12-04 | In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-… |
CVE-2018-16855 | High | 7.5 | 2018-12-03 | An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while co… |
CVE-2018-19763 | Medium | 5.5 | 2018-11-30 | There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19761 | Medium | 5.5 | 2018-11-30 | There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19759 | Medium | 5.5 | 2018-11-30 | There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19758 | Medium | 6.5 | 2018-11-30 | There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. |
CVE-2018-19756 | Medium | 5.5 | 2018-11-30 | There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19497 | Medium | 6.5 | 2018-11-29 | In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to c… |
CVE-2018-15980 | High | 7.5 | 2018-11-29 | Adobe Photoshop CC versions 19.1.6 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2018-15978 | High | 7.5 | 2018-11-29 | Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2018-8789 | High | 7.5 | 2018-11-29 | FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault). |
CVE-2018-19664 | Medium | 6.5 | 2018-11-29 | libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg. |
CVE-2018-19662 | High | 8.1 | 2018-11-29 | An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service. |
CVE-2018-19661 | Medium | 6.5 | 2018-11-29 | An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service. |
CVE-2018-19627 | High | 7.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary. |
CVE-2018-19626 | Medium | 5.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination. |
CVE-2018-19625 | Medium | 5.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based bu… |
CVE-2018-5916 | Medium | 6.5 | 2018-11-28 | Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear… |
CVE-2017-18315 | High | 7.8 | 2018-11-28 | Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600. |
CVE-2017-11078 | High | 7.8 | 2018-11-27 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bo… |
CVE-2018-19566 | High | 7.1 | 2018-11-26 | A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles… |
CVE-2018-19565 | High | 7.1 | 2018-11-26 | A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles t… |
CVE-2018-19543 | High | 7.8 | 2018-11-26 | An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c. |
CVE-2018-19541 | High | 8.8 | 2018-11-26 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.2… |
CVE-2018-19535 | Medium | 6.5 | 2018-11-26 | In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer o… |
CVE-2018-19519 | Medium | 5.5 | 2018-11-25 | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
CVE-2018-19517 | Medium | 5.5 | 2018-11-24 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf. |
CVE-2018-19504 | High | 7.8 | 2018-11-23 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c. |
CVE-2018-19416 | High | 7.8 | 2018-11-21 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf. |
CVE-2018-19390 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF d… |
CVE-2018-19389 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP da… |
CVE-2018-19388 | Medium | 5.5 | 2018-11-20 | FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read, access violation, and application crash)… |
CVE-2018-19353 | Medium | 6.5 | 2018-11-18 | The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read and application cras… |