Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,436)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-5196 1Irssi 1Irssi May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8.
CVE-2017-5195 1Irssi 1Irssi May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code.
CVE-2016-10071 1Imagemagick 1Imagemagick May 13, 2026 Mar 2, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
CVE-2017-6387 1Radare 1Radare2 May 13, 2026 Mar 2, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file.
CVE-2017-6347 1Linux 1Linux Kernel May 13, 2026 Mar 1, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or...Show more The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission.Show less
CVE-2017-5978 1Gdraheim 1Zziplib May 13, 2026 Mar 1, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
CVE-2017-5977 1Gdraheim 1Zziplib May 13, 2026 Mar 1, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.
CVE-2017-5504 1Jasper Project 1Jasper May 13, 2026 Mar 1, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
CVE-2016-8388 1Iceni 1Argus May 13, 2026 Feb 28, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write t...Show more An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects.Show less
CVE-2016-10029 1Qemu 1Qemu May 13, 2026 Feb 27, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout...Show more The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.Show less
CVE-2016-10028 1Qemu 1Qemu May 13, 2026 Feb 27, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and...Show more The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.Show less
CVE-2016-4493 1Gnu 1Libiberty May 13, 2026 Feb 24, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
CVE-2017-6310 2Debian Tnef Project 2Debian Linux Tnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker.
CVE-2017-6309 2Debian Tnef Project 2Debian Linux Tnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker.
CVE-2017-6305 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write."
CVE-2017-6304 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."
CVE-2017-6301 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."
CVE-2016-7643 1Apple 3Iphone Os Mac Os XWatchos May 13, 2026 Feb 20, 2017 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers t...Show more An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted web site.Show less
CVE-2016-4682 1Apple 1Mac Os X May 13, 2026 Feb 20, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information...Show more An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted SGI file.Show less
CVE-2016-7510 1Libdwarf Project 1Libdwarf May 13, 2026 Feb 17, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted input.

Previous 1...508509510...522 Next