Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,436)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-6437 1Libplist Project 1Libplist May 13, 2026 Mar 15, 2017 N/A· v4 5.0 MEDIUM· v3 1.9 LOW· v2 The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.
CVE-2016-6906 1Libgd 1Libgd May 13, 2026 Mar 15, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related to the decompression b...Show more The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related to the decompression buffer.Show less
CVE-2017-6335 1Graphicsmagick 1Graphicsmagick May 13, 2026 Mar 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samples per pixel value i...Show more The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samples per pixel value in a CMYKA TIFF file.Show less
CVE-2016-10172 1Wavpack Project 1Wavpack May 13, 2026 Mar 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVE-2016-10171 1Wavpack Project 1Wavpack May 13, 2026 Mar 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVE-2016-10170 1Wavpack Project 1Wavpack May 13, 2026 Mar 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVE-2016-10169 1Wavpack Project 1Wavpack May 13, 2026 Mar 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVE-2017-6883 1Foxitsoftware 2Foxit Reader Phantompdf May 13, 2026 Mar 14, 2017 N/A· v4 4.7 MEDIUM· v3 2.6 LOW· v2 The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash)...Show more The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.Show less
CVE-2017-6802 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF() in libytnef.
CVE-2017-6801 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef.
CVE-2017-6800 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to MAPIPrint() in libytnef.
CVE-2017-2786 1Pharos 1Popup May 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read...Show more A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service.Show less
CVE-2016-5315 2Debian Libtiff 2Debian Linux Libtiff May 13, 2026 Mar 7, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.
CVE-2016-10244 2Debian Freetype 2Debian Linux Freetype May 13, 2026 Mar 6, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or pos...Show more The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.Show less
CVE-2017-6500 2Debian Imagemagick 2Debian Linux Imagemagick May 13, 2026 Mar 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.
CVE-2016-10070 2Imagemagick Opensuse 2Imagemagick Leap May 13, 2026 Mar 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
CVE-2016-7969 3Fedoraproject Libass ProjectOpensuse 4Fedora LeapLibass+1 more May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."
CVE-2016-6884 1Matrixssl 1Matrixssl May 13, 2026 Mar 3, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message.
CVE-2017-5834 1Libimobiledevice 1Libplist May 13, 2026 Mar 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
CVE-2017-5356 2Debian Irssi 2Debian Linux Irssi May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]).

Previous 1...507508509...522 Next