CWE-125 · Out-of-bounds Read (page 90)
Page 90 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9049 | High | 7.5 | 2017-05-18 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes p… |
CVE-2017-9044 | Medium | 5.5 | 2017-05-18 | The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SE… |
CVE-2017-9041 | Medium | 5.5 | 2017-05-18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to M… |
CVE-2017-9038 | Medium | 5.5 | 2017-05-18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to t… |
CVE-2017-6658 | High | 7.5 | 2017-05-16 | Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past th… |
CVE-2017-8908 | Medium | 5.5 | 2017-05-12 | The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted Post… |
CVE-2017-8872 | Critical | 9.1 | 2017-05-10 | The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure. |
CVE-2017-8845 | Medium | 5.5 | 2017-05-08 | The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service (invalid memory read and… |
CVE-2017-8831 | Medium | 6.4 | 2017-05-08 | The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out… |
CVE-2017-8787 | High | 8.8 | 2017-05-05 | The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause… |
CVE-2017-3731 | High | 7.5 | 2017-05-04 | If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to per… |
CVE-2017-8455 | High | 7.8 | 2017-05-03 | Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execu… |
CVE-2017-8454 | High | 8.8 | 2017-05-03 | Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execu… |
CVE-2017-8453 | High | 8.8 | 2017-05-03 | Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execu… |
CVE-2017-7483 | High | 7.5 | 2017-05-02 | Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer tha… |
CVE-2017-8401 | Medium | 6.5 | 2017-05-01 | In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib/png.c:724. This issue can be triggered by a malformed PNG fil… |
CVE-2017-8393 | High | 7.5 | 2017-05-01 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assu… |
CVE-2017-8374 | Medium | 5.5 | 2017-05-01 | The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and applica… |
CVE-2017-8365 | Medium | 6.5 | 2017-04-30 | The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a craf… |
CVE-2017-8363 | Medium | 6.5 | 2017-04-30 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application… |
CVE-2017-8362 | Medium | 6.5 | 2017-04-30 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a cr… |
CVE-2017-8294 | High | 7.5 | 2017-04-27 | libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted… |
CVE-2017-5030 | High | 8.8 | 2017-04-24 | Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote a… |
CVE-2017-6615 | Medium | 6.3 | 2017-04-20 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial… |
CVE-2017-2806 | Medium | 4.3 | 2017-04-20 | An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead t… |
CVE-2016-7534 | Medium | 6.5 | 2017-04-20 | The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file. |
CVE-2016-7532 | Medium | 6.5 | 2017-04-20 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file. |
CVE-2016-7527 | Medium | 6.5 | 2017-04-20 | coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7525 | Medium | 6.5 | 2017-04-20 | Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file. |
CVE-2016-7521 | Medium | 6.5 | 2017-04-20 | Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file. |
CVE-2016-7520 | Medium | 6.5 | 2017-04-20 | Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file. |
CVE-2016-7518 | Medium | 6.5 | 2017-04-20 | The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file. |
CVE-2016-7517 | Medium | 6.5 | 2017-04-20 | The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file. |
CVE-2016-7516 | Medium | 6.5 | 2017-04-20 | The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file. |
CVE-2016-7514 | Medium | 6.5 | 2017-04-20 | The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD fi… |
CVE-2016-5010 | Medium | 6.5 | 2017-04-20 | coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file. |
CVE-2015-8958 | Medium | 6.5 | 2017-04-20 | coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted S… |
CVE-2017-7718 | Medium | 5.5 | 2017-04-20 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU proce… |
CVE-2017-7960 | Medium | 5.5 | 2017-04-19 | The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-rea… |
CVE-2016-7537 | Medium | 6.5 | 2017-04-19 | MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file. |
CVE-2016-7533 | Medium | 6.5 | 2017-04-19 | The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file. |
CVE-2016-7529 | Medium | 6.5 | 2017-04-19 | coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file. |
CVE-2016-7528 | Medium | 6.5 | 2017-04-19 | The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file. |
CVE-2016-7522 | Medium | 6.5 | 2017-04-19 | The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD fil… |
CVE-2016-7519 | Medium | 6.5 | 2017-04-19 | The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7515 | Medium | 6.5 | 2017-04-19 | The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the n… |
CVE-2017-7939 | Medium | 5.5 | 2017-04-18 | The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based… |
CVE-2016-5309 | Medium | 5.5 | 2017-04-14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec… |
CVE-2017-7854 | Medium | 5.5 | 2017-04-13 | The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra… |
CVE-2016-9959 | High | 7.8 | 2017-04-12 | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. |
CVE-2017-7716 | Medium | 5.5 | 2017-04-12 | The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and appl… |
CVE-2017-3060 | Critical | 9.8 | 2017-04-12 | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitatio… |
CVE-2017-3053 | Medium | 5.5 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image con… |
CVE-2017-3052 | Medium | 5.5 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image con… |
CVE-2017-3051 | High | 7.8 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in th… |
CVE-2017-3046 | Medium | 5.5 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000… |
CVE-2017-3045 | Medium | 5.5 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000… |
CVE-2017-3033 | Low | 3.3 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JP… |
CVE-2017-3032 | Low | 3.3 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000… |
CVE-2017-3031 | Low | 3.3 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engi… |
CVE-2017-3022 | Low | 3.3 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when parsing the… |
CVE-2017-3021 | Low | 3.3 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000… |
CVE-2017-3019 | High | 7.8 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in th… |
CVE-2017-7697 | Medium | 5.5 | 2017-04-11 | In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. |
CVE-2014-9837 | Medium | 6.5 | 2017-04-11 | coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file. |
CVE-2014-8716 | Medium | 6.2 | 2017-04-11 | The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash). |
CVE-2014-8562 | Medium | 5.5 | 2017-04-11 | DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2014-8355 | Medium | 5.5 | 2017-04-11 | PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2014-8354 | Medium | 6.5 | 2017-04-11 | The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… |
CVE-2016-5322 | Medium | 5.5 | 2017-04-11 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif… |
CVE-2017-7623 | Medium | 5.5 | 2017-04-10 | The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-bas… |
CVE-2017-7612 | Medium | 5.5 | 2017-04-09 | The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application c… |
CVE-2017-7611 | Medium | 5.5 | 2017-04-09 | The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and applicatio… |
CVE-2017-7610 | Medium | 5.5 | 2017-04-09 | The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash… |
CVE-2017-7608 | Medium | 5.5 | 2017-04-09 | The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-r… |
CVE-2017-7607 | Medium | 5.5 | 2017-04-09 | The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application c… |
CVE-2017-7454 | Medium | 5.5 | 2017-04-06 | The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based b… |
CVE-2014-9829 | Medium | 6.5 | 2017-04-05 | coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file. |
CVE-2017-7379 | Medium | 5.5 | 2017-04-03 | The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based b… |
CVE-2017-7378 | Medium | 5.5 | 2017-04-03 | The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
CVE-2017-5923 | High | 7.5 | 2017-04-03 | libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted rule t… |
CVE-2016-10226 | High | 7.5 | 2017-04-03 | JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds… |
CVE-2017-2450 | High | 7.1 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before… |
CVE-2017-2439 | High | 7.1 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before… |
CVE-2017-2409 | High | 7.1 | 2017-04-02 | An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Menus" component. It allows attackers to obtain se… |
CVE-2017-3009 | High | 7.5 | 2017-03-31 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the… |
CVE-2014-9818 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file. |
CVE-2014-9816 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file. |
CVE-2017-7304 | High | 7.5 | 2017-03-29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a c… |
CVE-2017-7303 | High | 7.5 | 2017-03-29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a c… |
CVE-2017-7302 | High | 7.5 | 2017-03-29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable… |
CVE-2017-7300 | High | 7.5 | 2017-03-29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulner… |
CVE-2017-7299 | Medium | 5.5 | 2017-03-29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bf… |
CVE-2017-7277 | High | 7.1 | 2017-03-28 | The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensitive information fr… |
CVE-2015-8763 | High | 8.1 | 2017-03-27 | The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which tr… |
CVE-2017-7263 | High | 7.8 | 2017-03-26 | The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application c… |
CVE-2016-10270 | High | 7.8 | 2017-03-24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF i… |
CVE-2016-10269 | High | 7.8 | 2017-03-24 | LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to caus… |
CVE-2017-5335 | High | 7.5 | 2017-03-24 | The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (o… |
CVE-2016-3178 | Medium | 5.5 | 2017-03-24 | The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon… |