Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,436)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3995 4Canonical MozillaRedhat+1 more 12Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+9 more Apr 29, 2026 Oct 10, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute...Show more The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.Show less
CVE-2012-5110 1Google 1Chrome Apr 29, 2026 Oct 9, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2012-5109 1Google 1Chrome Apr 29, 2026 Oct 9, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression.
CVE-2012-1571 2Christos Zoulas Tim Robbins 2File Libmagic Apr 29, 2026 Jul 17, 2012 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
CVE-2012-1798 4Debian ImagemagickOpensuse+1 more 10Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+7 more Apr 29, 2026 Jun 5, 2012 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
CVE-2012-0259 4Canonical DebianImagemagick+1 more 4Debian Linux ImagemagickOpensuse+1 more Apr 29, 2026 Jun 5, 2012 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG fi...Show more The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.Show less
CVE-2011-3066 1Google 1Chrome Apr 29, 2026 Apr 5, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3060 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Mar 30, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3059 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Mar 30, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3057 1Google 1Chrome Apr 29, 2026 Mar 22, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation.
CVE-2011-3040 3Apple GoogleOpensuse 5Chrome Iphone OsItunes+2 more Apr 29, 2026 Mar 5, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVE-2011-3025 1Google 1Chrome Apr 29, 2026 Feb 16, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3970 3Google SuseXmlsoft 5Chrome LibxsltLinux Enterprise Desktop+2 more Apr 29, 2026 Feb 9, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3963 1Google 1Chrome Apr 29, 2026 Feb 9, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3962 1Google 1Chrome Apr 29, 2026 Feb 9, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3960 1Google 1Chrome Apr 29, 2026 Feb 9, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3406 1Microsoft 5Windows 7 Windows Server 2003Windows Server 2008+2 more Apr 29, 2026 Dec 14, 2011 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2,...Show more Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote authenticated users to execute arbitrary code via a crafted query that leverages incorrect memory initialization, aka "Active Directory Buffer Overflow Vulnerability."Show less
CVE-2011-3916 1Google 1Chrome Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3911 1Google 1Chrome Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3910 1Google 1Chrome Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Previous 1...518 519520521 522 Next