CWE-125 · Out-of-bounds Read (page 90)
Page 90 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7729 | Medium | 5.5 | 2018-03-06 | An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler::ParsePSFile() function in XMPFiles/sour… |
CVE-2018-7728 | Medium | 5.5 | 2018-03-06 | An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buff… |
CVE-2017-6295 | High | 8.4 | 2018-03-06 | NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the… |
CVE-2017-6280 | High | 7.5 | 2018-03-06 | NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. And… |
CVE-2017-17137 | Medium | 5.5 | 2018-03-05 | PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V5… |
CVE-2017-14461 | Medium | 5.9 | 2018-03-02 | A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information di… |
CVE-2018-7641 | High | 7.8 | 2018-03-02 | An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability t… |
CVE-2018-7640 | High | 7.8 | 2018-03-02 | An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability t… |
CVE-2018-7639 | High | 7.8 | 2018-03-02 | An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability t… |
CVE-2018-7638 | High | 7.8 | 2018-03-02 | An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability t… |
CVE-2018-7637 | High | 7.8 | 2018-03-02 | An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability t… |
CVE-2018-7588 | High | 7.8 | 2018-03-01 | An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. |
CVE-2017-18212 | Critical | 9.8 | 2018-03-01 | An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a… |
CVE-2018-7550 | High | 8.8 | 2018-03-01 | The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh… |
CVE-2018-7557 | Medium | 6.5 | 2018-02-28 | The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an… |
CVE-2018-4914 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4912 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4909 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4908 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4907 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4906 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4905 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4903 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4900 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4899 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4897 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4896 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4894 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4893 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4891 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4889 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4887 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4886 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4885 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4884 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4883 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4882 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4881 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2018-4880 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions… |
CVE-2017-16229 | Medium | 5.5 | 2018-02-26 | In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is suppli… |
CVE-2018-7455 | Medium | 5.5 | 2018-02-24 | An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstr… |
CVE-2017-18198 | High | 8.8 | 2018-02-24 | print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly… |
CVE-2017-14910 | Critical | 9.8 | 2018-02-23 | In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615… |
CVE-2018-7439 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record. |
CVE-2018-7438 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function. |
CVE-2018-7437 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST function. |
CVE-2018-7436 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function. |
CVE-2018-7435 | High | 8.8 | 2018-02-23 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function. |
CVE-2018-7254 | High | 7.8 | 2018-02-19 | The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or… |
CVE-2018-7253 | High | 7.8 | 2018-02-19 | The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-re… |
CVE-2018-5380 | Medium | 4.3 | 2018-02-19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input. |
CVE-2018-7051 | High | 7.5 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings. |
CVE-2017-17283 | Medium | 5.3 | 2018-02-15 | Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006… |
CVE-2017-17202 | High | 7.5 | 2018-02-15 | Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R00… |
CVE-2017-17185 | Medium | 4.3 | 2018-02-15 | Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006… |
CVE-2017-17182 | Medium | 4.3 | 2018-02-15 | Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006… |
CVE-2017-17165 | High | 7.5 | 2018-02-15 | IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300… |
CVE-2017-15353 | Low | 3.7 | 2018-02-15 | Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00… |
CVE-2017-15331 | Medium | 5.3 | 2018-02-15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-12722 | Medium | 5.3 | 2018-02-15 | An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component… |
CVE-2017-18185 | Medium | 5.5 | 2018-02-13 | An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is caused by… |
CVE-2017-18184 | Medium | 5.5 | 2018-02-13 | An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc. |
CVE-2018-6930 | Medium | 6.5 | 2018-02-13 | A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause… |
CVE-2017-17724 | Medium | 6.5 | 2018-02-12 | In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attack… |
CVE-2017-17723 | High | 8.1 | 2018-02-12 | In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to… |
CVE-2016-9570 | High | 7.5 | 2018-02-12 | cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by le… |
CVE-2016-9569 | Medium | 4.4 | 2018-02-12 | The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash)… |
CVE-2018-6912 | Medium | 6.5 | 2018-02-12 | The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a cra… |
CVE-2018-1000034 | Critical | 9.1 | 2018-02-09 | An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory. |
CVE-2018-1000033 | Critical | 9.1 | 2018-02-09 | An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory. |
CVE-2018-6872 | Medium | 5.5 | 2018-02-09 | The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to… |
CVE-2017-15388 | High | 8.8 | 2018-02-07 | Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a craf… |
CVE-2018-6767 | High | 7.8 | 2018-02-06 | A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service… |
CVE-2018-6621 | Medium | 6.5 | 2018-02-05 | The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a craft… |
CVE-2018-6612 | Medium | 5.5 | 2018-02-04 | An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG fi… |
CVE-2018-6611 | High | 8.8 | 2018-02-04 | soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file. |
CVE-2017-16912 | Medium | 5.9 | 2018-01-31 | The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of se… |
CVE-2018-6406 | High | 8.8 | 2018-01-30 | The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .web… |
CVE-2018-6392 | Medium | 6.5 | 2018-01-29 | The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via… |
CVE-2017-12378 | Medium | 5.5 | 2018-01-26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (… |
CVE-2017-12377 | Critical | 9.8 | 2018-01-26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (… |
CVE-2018-6315 | High | 8.8 | 2018-01-25 | The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which… |
CVE-2018-1000005 | Critical | 9.1 | 2018-01-24 | libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) t… |
CVE-2018-5683 | Medium | 6.0 | 2018-01-23 | The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveragin… |
CVE-2017-18030 | Medium | 4.4 | 2018-01-23 | The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds arr… |
CVE-2017-14457 | High | 8.2 | 2018-01-19 | An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of CPP-Ethereum. A spe… |
CVE-2018-5698 | High | 7.8 | 2018-01-14 | libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string. |
CVE-2018-5360 | High | 8.8 | 2018-01-14 | LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in G… |
CVE-2017-9712 | High | 7.5 | 2018-01-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in… |
CVE-2018-4871 | High | 7.5 | 2018-01-09 | An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This vulnerability occurs because of computation that reads data that is pa… |
CVE-2018-5248 | High | 8.8 | 2018-01-05 | In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function. |
CVE-2017-4948 | High | 7.1 | 2018-01-05 | VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Works… |
CVE-2018-0780 | Medium | 5.3 | 2018-01-04 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the… |
CVE-2018-0767 | Medium | 5.3 | 2018-01-04 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user'… |
CVE-2017-18009 | High | 7.5 | 2018-01-01 | In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. |
CVE-2017-17942 | High | 8.8 | 2017-12-28 | In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c. |
CVE-2017-17935 | High | 7.5 | 2017-12-27 | The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to ca… |
CVE-2017-17915 | High | 8.8 | 2017-12-27 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testin… |
CVE-2017-17913 | High | 8.8 | 2017-12-27 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libw… |
CVE-2017-17912 | High | 8.8 | 2017-12-27 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data… |