CWE-125 · Out-of-bounds Read (page 89)
Page 89 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11569 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11568 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11542 | Critical | 9.8 | 2017-07-23 | tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c. |
CVE-2017-11541 | Critical | 9.8 | 2017-07-23 | tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c. |
CVE-2017-11540 | Medium | 6.5 | 2017-07-23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the Wri… |
CVE-2017-11535 | Medium | 6.5 | 2017-07-23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. |
CVE-2017-11533 | Medium | 6.5 | 2017-07-23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c. |
CVE-2017-7036 | Medium | 5.5 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7013 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7010 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-11465 | Critical | 9.8 | 2017-07-19 | The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecifie… |
CVE-2017-11423 | Medium | 5.5 | 2017-07-18 | The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of… |
CVE-2017-11399 | High | 7.8 | 2017-07-17 | Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-… |
CVE-2017-10987 | High | 7.5 | 2017-07-17 | An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service. |
CVE-2017-10982 | High | 7.5 | 2017-07-17 | An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service. |
CVE-2017-11367 | High | 7.5 | 2017-07-17 | The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application cra… |
CVE-2017-9814 | High | 7.5 | 2017-07-17 | cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unex… |
CVE-2017-11341 | High | 7.5 | 2017-07-17 | There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack. |
CVE-2017-11336 | Medium | 6.5 | 2017-07-17 | There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of ser… |
CVE-2017-11147 | Critical | 9.1 | 2017-07-10 | In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter… |
CVE-2017-11126 | Medium | 5.5 | 2017-07-10 | The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application… |
CVE-2017-11108 | High | 7.5 | 2017-07-08 | tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occur… |
CVE-2017-10995 | Medium | 5.5 | 2017-07-07 | The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and applicat… |
CVE-2017-10989 | Critical | 9.8 | 2017-07-07 | The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted data… |
CVE-2017-10976 | High | 7.5 | 2017-07-06 | When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c. |
CVE-2017-10928 | High | 8.8 | 2017-07-05 | In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from proc… |
CVE-2017-10687 | High | 7.5 | 2017-06-29 | In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of s… |
CVE-2017-10683 | High | 7.5 | 2017-06-29 | In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of ser… |
CVE-2017-9986 | High | 7.8 | 2017-06-28 | The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or pos… |
CVE-2017-9985 | High | 7.8 | 2017-06-28 | The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-bou… |
CVE-2017-9984 | High | 7.8 | 2017-06-28 | The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boun… |
CVE-2017-7520 | High | 7.4 | 2017-06-27 | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attack… |
CVE-2017-9223 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (i… |
CVE-2017-9221 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (i… |
CVE-2017-9218 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (i… |
CVE-2017-9955 | Medium | 5.5 | 2017-06-26 | The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to… |
CVE-2017-9954 | Medium | 5.5 | 2017-06-26 | The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cau… |
CVE-2014-8127 | Medium | 6.5 | 2017-06-26 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString funct… |
CVE-2017-9935 | High | 8.8 | 2017-06-26 | In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages… |
CVE-2017-9870 | Medium | 5.5 | 2017-06-25 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of ser… |
CVE-2017-9869 | Medium | 5.5 | 2017-06-25 | The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of serv… |
CVE-2015-9099 | Medium | 5.5 | 2017-06-25 | The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and application crash… |
CVE-2017-9865 | Medium | 5.5 | 2017-06-25 | The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and… |
CVE-2017-9847 | Medium | 5.5 | 2017-06-24 | The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash… |
CVE-2017-9782 | Medium | 5.5 | 2017-06-21 | JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_… |
CVE-2017-9130 | Medium | 5.5 | 2017-06-21 | The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (invalid memory r… |
CVE-2017-7668 | High | 7.5 | 2017-06-20 | The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the… |
CVE-2017-9728 | Critical | 9.8 | 2017-06-16 | In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression. |
CVE-2017-8240 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. |
CVE-2017-8234 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. |
CVE-2017-7365 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. |
CVE-2017-9128 | Medium | 6.5 | 2017-06-12 | The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read a… |
CVE-2017-9125 | Medium | 6.5 | 2017-06-12 | The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via… |
CVE-2017-9123 | Medium | 6.5 | 2017-06-12 | The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and applicat… |
CVE-2017-4912 | High | 7.8 | 2017-06-08 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TT… |
CVE-2017-4910 | High | 7.8 | 2017-06-08 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser i… |
CVE-2017-4899 | Medium | 4.7 | 2017-06-07 | VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash… |
CVE-2017-9474 | Medium | 5.5 | 2017-06-07 | In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra… |
CVE-2017-9472 | Medium | 5.5 | 2017-06-07 | In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash)… |
CVE-2017-9471 | Medium | 5.5 | 2017-06-07 | In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) v… |
CVE-2017-9465 | High | 7.1 | 2017-06-06 | The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitiv… |
CVE-2017-9434 | Medium | 5.3 | 2017-06-05 | Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter. |
CVE-2017-9359 | High | 7.5 | 2017-06-02 | The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, a… |
CVE-2017-9301 | High | 7.8 | 2017-05-29 | plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and appl… |
CVE-2017-9265 | Critical | 9.8 | 2017-05-29 | In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the func… |
CVE-2017-9264 | Critical | 9.8 | 2017-05-29 | In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets i… |
CVE-2017-9227 | Critical | 9.8 | 2017-05-24 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs… |
CVE-2017-9224 | Critical | 9.8 | 2017-05-24 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs… |
CVE-2017-2801 | Medium | 6.5 | 2017-05-24 | A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate veri… |
CVE-2017-8313 | Medium | 5.5 | 2017-05-23 | Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memor… |
CVE-2017-8312 | Medium | 5.5 | 2017-05-23 | Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitl… |
CVE-2017-8310 | Medium | 5.5 | 2017-05-23 | Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated me… |
CVE-2017-9207 | Medium | 6.5 | 2017-05-23 | The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-base… |
CVE-2017-9206 | Medium | 6.5 | 2017-05-23 | The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-base… |
CVE-2017-9205 | Medium | 6.5 | 2017-05-23 | The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid r… |
CVE-2017-9204 | Medium | 6.5 | 2017-05-23 | The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid r… |
CVE-2017-9195 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27. |
CVE-2017-9194 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29. |
CVE-2017-9193 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33. |
CVE-2017-9189 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function… |
CVE-2017-9180 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp… |
CVE-2017-9179 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp… |
CVE-2017-9177 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp… |
CVE-2017-9174 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:2… |
CVE-2017-9171 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24. |
CVE-2017-9166 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11. |
CVE-2017-9165 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:17:11. |
CVE-2017-9164 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:16:11. |
CVE-2017-9155 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the input_pnm_reader function in in… |
CVE-2017-9154 | High | 7.5 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:1… |
CVE-2017-9152 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41. |
CVE-2017-9147 | Medium | 6.5 | 2017-05-22 | LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a cr… |
CVE-2017-9117 | Medium | 4.0 | 2017-05-21 | In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header mat… |
CVE-2017-9074 | High | 7.8 | 2017-05-19 | The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, whi… |
CVE-2017-9058 | Critical | 9.8 | 2017-05-18 | In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c. |
CVE-2017-9055 | Critical | 9.8 | 2017-05-18 | An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leadin… |
CVE-2017-9054 | Critical | 9.8 | 2017-05-18 | An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte pointer was dereferenced just before it was… |
CVE-2017-9053 | Critical | 9.1 | 2017-05-18 | An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to… |
CVE-2017-9052 | Critical | 9.8 | 2017-05-18 | An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a… |
CVE-2017-9050 | High | 7.5 | 2017-05-18 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes progra… |