Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,437)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-8363 2Debian Libsndfile Project 2Debian Linux Libsndfile May 13, 2026 Apr 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
CVE-2017-8362 2Debian Libsndfile Project 2Debian Linux Libsndfile May 13, 2026 Apr 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.
CVE-2017-8294 1Virustotal 1Yara May 13, 2026 Apr 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted rule that is mishandled in the yr_re_exec function.
CVE-2017-5030 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more Apr 21, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
CVE-2017-6615 1Cisco 1Ios Xe May 13, 2026 Apr 20, 2017 N/A· v4 6.3 MEDIUM· v3 6.3 MEDIUM· v2 A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a ra...Show more A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read request that contains certain criteria for a specific object ID (OID) and an active crypto session is disconnected on an affected device. An attacker who can authenticate to an affected device could trigger this vulnerability by issuing an SNMP request for a specific OID on the device. A successful exploit will cause the device to restart due to an attempt to access an invalid memory region. The attacker does not control how or when crypto sessions are disconnected on the device. Cisco Bug IDs: CSCvb94392.Show less
CVE-2017-2806 1Lexmark 1Perceptive Document Filters May 13, 2026 Apr 20, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulner...Show more An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400Show less
CVE-2016-7534 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file.
CVE-2016-7532 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-7527 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-7525 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-7521 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-7520 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.
CVE-2016-7518 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file.
CVE-2016-7517 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file.
CVE-2016-7516 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file.
CVE-2016-7514 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-5010 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
CVE-2015-8958 1Imagemagick 1Imagemagick May 13, 2026 Apr 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file.
CVE-2017-7718 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Apr 20, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cir...Show more hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.Show less
CVE-2017-7960 1Gnome 1Libcroco May 13, 2026 Apr 19, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.

Previous 1...502503504...522 Next