CWE-125 · Out-of-bounds Read (page 88)
Page 88 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14227 | High | 7.5 | 2017-09-09 | In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to… |
CVE-2017-14226 | High | 7.5 | 2017-09-09 | WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial… |
CVE-2017-14166 | Medium | 6.5 | 2017-09-06 | libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, r… |
CVE-2017-14132 | Medium | 6.5 | 2017-09-04 | JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.90… |
CVE-2017-14130 | Medium | 5.5 | 2017-09-04 | The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows rem… |
CVE-2017-14129 | Medium | 5.5 | 2017-09-04 | The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to… |
CVE-2017-14128 | Medium | 5.5 | 2017-09-04 | The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attacker… |
CVE-2017-14122 | Critical | 9.1 | 2017-09-03 | unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp. |
CVE-2017-13672 | Medium | 5.5 | 2017-09-01 | QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds… |
CVE-2017-13769 | Medium | 6.5 | 2017-08-30 | The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by se… |
CVE-2017-13765 | High | 7.5 | 2017-08-30 | In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/… |
CVE-2017-13757 | Medium | 5.5 | 2017-08-29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attacke… |
CVE-2017-13755 | Medium | 5.5 | 2017-08-29 | In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as… |
CVE-2017-13744 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0. |
CVE-2017-13738 | High | 8.8 | 2017-08-29 | There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0. |
CVE-2017-12954 | Medium | 6.5 | 2017-08-28 | The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and applic… |
CVE-2017-12951 | Medium | 6.5 | 2017-08-28 | The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over… |
CVE-2017-13139 | Critical | 9.8 | 2017-08-23 | In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. |
CVE-2017-13134 | Medium | 6.5 | 2017-08-23 | In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to ca… |
CVE-2017-12967 | Medium | 6.5 | 2017-08-19 | The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause… |
CVE-2017-12963 | High | 7.5 | 2017-08-18 | There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar… |
CVE-2017-12958 | High | 7.5 | 2017-08-18 | There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote den… |
CVE-2017-12957 | Medium | 6.5 | 2017-08-18 | There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial… |
CVE-2017-12956 | Medium | 6.5 | 2017-08-18 | There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service. |
CVE-2017-8268 | High | 7.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing wit… |
CVE-2017-8256 | High | 7.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast… |
CVE-2015-9050 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a C… |
CVE-2017-9454 | High | 7.5 | 2017-08-18 | Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of servi… |
CVE-2017-12941 | Critical | 9.8 | 2017-08-18 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. |
CVE-2017-12940 | Critical | 9.8 | 2017-08-18 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. |
CVE-2017-12937 | High | 8.8 | 2017-08-18 | The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read. |
CVE-2017-12935 | High | 8.8 | 2017-08-18 | The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack… |
CVE-2017-12933 | Critical | 9.8 | 2017-08-18 | The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over… |
CVE-2017-12445 | Medium | 6.5 | 2017-08-17 | The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read and application cras… |
CVE-2017-12444 | Medium | 6.5 | 2017-08-17 | The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a cr… |
CVE-2017-12443 | Medium | 6.5 | 2017-08-17 | The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted dj… |
CVE-2017-12442 | Medium | 6.5 | 2017-08-17 | The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu fi… |
CVE-2017-12441 | Medium | 6.5 | 2017-08-17 | The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu fi… |
CVE-2017-11664 | Medium | 6.5 | 2017-08-17 | The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a craft… |
CVE-2017-11663 | Medium | 6.5 | 2017-08-17 | The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a craft… |
CVE-2017-11662 | High | 7.5 | 2017-08-17 | The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file. |
CVE-2017-11661 | High | 7.5 | 2017-08-17 | The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a craft… |
CVE-2017-8258 | Medium | 5.5 | 2017-08-11 | An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver. |
CVE-2017-0725 | Medium | 5.5 | 2017-08-09 | A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194. |
CVE-2017-12640 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. |
CVE-2017-6418 | Medium | 5.5 | 2017-08-07 | libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message. |
CVE-2017-12599 | High | 8.8 | 2017-08-07 | OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by… |
CVE-2017-12598 | High | 8.8 | 2017-08-07 | OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bi… |
CVE-2017-12596 | High | 7.8 | 2017-08-07 | In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may res… |
CVE-2017-12458 | High | 7.8 | 2017-08-04 | The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and e… |
CVE-2017-12456 | High | 7.8 | 2017-08-04 | The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a cra… |
CVE-2017-12455 | High | 7.8 | 2017-08-04 | The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allow… |
CVE-2017-12454 | High | 7.8 | 2017-08-04 | The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier… |
CVE-2017-12453 | High | 7.8 | 2017-08-04 | The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows… |
CVE-2017-12452 | High | 7.8 | 2017-08-04 | The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti… |
CVE-2017-12451 | High | 7.8 | 2017-08-04 | The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GN… |
CVE-2017-12449 | High | 7.8 | 2017-08-04 | The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier… |
CVE-2017-9770 | Medium | 5.5 | 2017-08-02 | A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read operation to occur due to a field within… |
CVE-2017-11334 | Medium | 4.4 | 2017-08-02 | The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bo… |
CVE-2017-12142 | Medium | 5.5 | 2017-08-02 | In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a… |
CVE-2017-12067 | High | 7.5 | 2017-08-01 | Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. |
CVE-2017-11670 | High | 7.5 | 2017-07-31 | A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername funct… |
CVE-2017-11669 | High | 7.5 | 2017-07-31 | An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets… |
CVE-2017-11668 | High | 7.5 | 2017-07-31 | An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets… |
CVE-2017-11547 | Medium | 5.5 | 2017-07-31 | The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted… |
CVE-2017-11358 | Medium | 5.5 | 2017-07-31 | The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application cr… |
CVE-2017-11119 | Medium | 5.5 | 2017-07-31 | The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory… |
CVE-2017-11117 | Medium | 5.5 | 2017-07-31 | The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-rea… |
CVE-2017-11116 | High | 7.8 | 2017-07-31 | The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-rea… |
CVE-2017-11114 | Medium | 5.5 | 2017-07-31 | The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file. |
CVE-2017-11753 | Medium | 6.5 | 2017-07-30 | The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-r… |
CVE-2017-11734 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of se… |
CVE-2017-11731 | Medium | 5.5 | 2017-07-29 | An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows… |
CVE-2017-11730 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attac… |
CVE-2017-11729 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attac… |
CVE-2017-11728 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to ca… |
CVE-2017-11722 | Medium | 6.5 | 2017-07-28 | The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application… |
CVE-2017-11719 | High | 7.8 | 2017-07-28 | The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access… |
CVE-2017-11714 | High | 7.8 | 2017-07-28 | psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (appl… |
CVE-2017-11704 | Medium | 6.5 | 2017-07-28 | A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via… |
CVE-2017-9545 | Medium | 5.5 | 2017-07-27 | The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file. |
CVE-2017-9260 | Medium | 5.5 | 2017-07-27 | The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-… |
CVE-2017-9740 | High | 7.8 | 2017-07-26 | The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based bu… |
CVE-2017-9739 | High | 7.8 | 2017-07-26 | The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
CVE-2017-9727 | High | 7.8 | 2017-07-26 | The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer o… |
CVE-2017-9726 | High | 7.8 | 2017-07-26 | The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
CVE-2017-9620 | High | 7.8 | 2017-07-26 | The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based bu… |
CVE-2017-9611 | High | 7.8 | 2017-07-26 | The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
CVE-2017-9610 | High | 7.8 | 2017-07-26 | The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer o… |
CVE-2017-11654 | Medium | 5.9 | 2017-07-26 | An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A rem… |
CVE-2017-11639 | Medium | 6.5 | 2017-07-26 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, rel… |
CVE-2017-11434 | Medium | 5.5 | 2017-07-25 | The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU pr… |
CVE-2017-11608 | Medium | 6.5 | 2017-07-24 | There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial… |
CVE-2017-11605 | Medium | 6.5 | 2017-07-24 | There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack. |
CVE-2017-11600 | High | 7.0 | 2017-07-24 | net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFR… |
CVE-2017-11577 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11575 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from… |
CVE-2017-11573 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11572 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11570 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file. |