CWE-125 · Out-of-bounds Read (page 91)
Page 91 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7244 | Medium | 5.5 | 2017-03-23 | The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted… |
CVE-2016-9276 | High | 7.5 | 2017-03-23 | The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2017-5897 | Critical | 9.8 | 2017-03-23 | The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6… |
CVE-2017-5538 | Critical | 9.8 | 2017-03-23 | The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipset… |
CVE-2017-7226 | Critical | 9.1 | 2017-03-22 | The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffe… |
CVE-2017-7208 | High | 7.1 | 2017-03-21 | The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive informatio… |
CVE-2017-7206 | High | 7.1 | 2017-03-21 | The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sen… |
CVE-2017-6829 | Medium | 5.5 | 2017-03-20 | The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted fil… |
CVE-2017-5956 | Medium | 5.5 | 2017-03-20 | The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process… |
CVE-2015-8984 | Medium | 5.9 | 2017-03-20 | The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application cr… |
CVE-2014-9844 | Medium | 5.5 | 2017-03-20 | The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image… |
CVE-2017-6969 | Critical | 9.1 | 2017-03-17 | readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crash… |
CVE-2017-5667 | Medium | 6.5 | 2017-03-16 | The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service… |
CVE-2017-5849 | Medium | 5.5 | 2017-03-15 | tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-b… |
CVE-2015-8897 | Medium | 5.5 | 2017-03-15 | The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a… |
CVE-2017-6430 | Medium | 5.5 | 2017-03-15 | The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-o… |
CVE-2016-10197 | High | 7.5 | 2017-03-15 | The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname. |
CVE-2016-10195 | Critical | 9.8 | 2017-03-15 | The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variabl… |
CVE-2017-6851 | Medium | 5.5 | 2017-03-15 | The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image. |
CVE-2017-6840 | Medium | 5.5 | 2017-03-15 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a craf… |
CVE-2017-6437 | Medium | 5.0 | 2017-03-15 | The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plis… |
CVE-2016-6906 | Medium | 5.5 | 2017-03-15 | The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds… |
CVE-2017-6335 | Medium | 5.5 | 2017-03-14 | The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read… |
CVE-2016-10172 | Medium | 5.5 | 2017-03-14 | The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a craft… |
CVE-2016-10171 | Medium | 5.5 | 2017-03-14 | The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a craft… |
CVE-2016-10170 | Medium | 5.5 | 2017-03-14 | The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV f… |
CVE-2016-10169 | Medium | 5.5 | 2017-03-14 | The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. |
CVE-2017-6883 | Medium | 4.7 | 2017-03-14 | The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a… |
CVE-2017-6802 | High | 7.5 | 2017-03-10 | An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF()… |
CVE-2017-6801 | High | 7.5 | 2017-03-10 | An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef. |
CVE-2017-6800 | High | 7.5 | 2017-03-10 | An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to… |
CVE-2017-2786 | High | 7.5 | 2017-03-10 | A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to… |
CVE-2016-5315 | Medium | 5.5 | 2017-03-07 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif… |
CVE-2016-10244 | High | 7.8 | 2017-03-06 | The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to c… |
CVE-2017-6500 | Medium | 5.5 | 2017-03-06 | An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. |
CVE-2016-10070 | Medium | 5.5 | 2017-03-03 | Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-o… |
CVE-2016-7969 | High | 7.5 | 2017-03-03 | The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified… |
CVE-2016-6884 | Medium | 6.5 | 2017-03-03 | TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a cra… |
CVE-2017-5834 | Medium | 5.5 | 2017-03-03 | The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file. |
CVE-2017-5356 | High | 7.5 | 2017-03-03 | Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) with… |
CVE-2017-5196 | High | 7.5 | 2017-03-03 | Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8. |
CVE-2017-5195 | High | 7.5 | 2017-03-03 | Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code. |
CVE-2016-10071 | Medium | 5.5 | 2017-03-02 | coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat fi… |
CVE-2017-6387 | Medium | 5.5 | 2017-03-02 | The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application cra… |
CVE-2017-6347 | High | 7.8 | 2017-03-01 | The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows l… |
CVE-2017-5978 | Medium | 5.5 | 2017-03-01 | The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a craft… |
CVE-2017-5977 | Medium | 5.5 | 2017-03-01 | The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) vi… |
CVE-2017-5504 | Medium | 5.5 | 2017-03-01 | The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) vi… |
CVE-2016-8388 | High | 7.8 | 2017-02-28 | An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust a… |
CVE-2016-10029 | Medium | 5.5 | 2017-02-27 | The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of… |
CVE-2016-10028 | Medium | 5.5 | 2017-02-27 | The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest O… |
CVE-2016-4493 | Medium | 5.5 | 2017-02-24 | The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-o… |
CVE-2017-6310 | High | 7.8 | 2017-02-24 | An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid rea… |
CVE-2017-6309 | High | 7.8 | 2017-02-24 | An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and writ… |
CVE-2017-6305 | High | 7.8 | 2017-02-24 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write." |
CVE-2017-6304 | High | 7.8 | 2017-02-24 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read." |
CVE-2017-6301 | High | 7.8 | 2017-02-24 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads." |
CVE-2016-7643 | High | 8.1 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue i… |
CVE-2016-4682 | High | 7.1 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component… |
CVE-2016-7510 | Medium | 6.5 | 2017-02-17 | The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-… |
CVE-2016-5043 | High | 7.5 | 2017-02-17 | The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF… |
CVE-2016-5040 | High | 7.5 | 2017-02-17 | libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit hea… |
CVE-2016-5039 | High | 7.5 | 2017-02-17 | The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all… |
CVE-2016-5038 | High | 7.5 | 2017-02-17 | The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds re… |
CVE-2016-5036 | High | 7.5 | 2017-02-17 | The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted f… |
CVE-2016-5035 | Medium | 6.5 | 2017-02-17 | The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-o… |
CVE-2016-5033 | Medium | 6.5 | 2017-02-17 | The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-5032 | Medium | 6.5 | 2017-02-17 | The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-5031 | Medium | 5.5 | 2017-02-17 | The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-9773 | Medium | 5.5 | 2017-02-17 | Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of servi… |
CVE-2016-1249 | Medium | 5.9 | 2017-02-17 | The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds re… |
CVE-2017-6011 | Medium | 5.5 | 2017-02-16 | An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" sou… |
CVE-2017-6004 | High | 7.5 | 2017-02-16 | The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote at… |
CVE-2016-8681 | Medium | 5.5 | 2017-02-15 | The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds re… |
CVE-2016-8680 | Medium | 6.5 | 2017-02-15 | The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds re… |
CVE-2016-8679 | Medium | 6.5 | 2017-02-15 | The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds re… |
CVE-2016-8678 | Medium | 5.5 | 2017-02-15 | The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read a… |
CVE-2016-7393 | Medium | 5.5 | 2017-02-15 | Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-of-bounds r… |
CVE-2017-5896 | Medium | 5.5 | 2017-02-15 | Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bou… |
CVE-2016-8689 | High | 7.5 | 2017-02-15 | The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) vi… |
CVE-2016-8688 | Medium | 5.5 | 2017-02-15 | The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of servic… |
CVE-2016-8682 | High | 7.5 | 2017-02-15 | The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT… |
CVE-2017-2981 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2980 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2979 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2978 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2977 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2976 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2975 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-2974 | High | 7.5 | 2017-02-15 | Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclos… |
CVE-2017-5848 | High | 7.5 | 2017-02-09 | The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (inval… |
CVE-2017-5847 | High | 7.5 | 2017-02-09 | The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of… |
CVE-2017-5846 | Medium | 5.5 | 2017-02-09 | The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cau… |
CVE-2017-5845 | High | 7.5 | 2017-02-09 | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of serv… |
CVE-2017-5841 | High | 7.5 | 2017-02-09 | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of serv… |
CVE-2017-5840 | High | 7.5 | 2017-02-09 | The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… |
CVE-2017-5838 | High | 7.5 | 2017-02-09 | The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of… |
CVE-2016-10199 | High | 7.5 | 2017-02-09 | The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of servi… |
CVE-2016-10198 | Medium | 5.5 | 2017-02-09 | The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a den… |
CVE-2015-8608 | Critical | 9.8 | 2017-02-07 | The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbi… |