Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,136)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-1232 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 Jun 9, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.
CVE-2020-9847 1Apple 1Mac Os X Jun 17, 2026 Jun 9, 2020 N/A· v4 8.6 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break out of its sandbox.
CVE-2020-9838 1Apple 2Ipados Iphone Os Jun 17, 2026 Jun 9, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to cause arbitrary code execution.
CVE-2020-9837 1Apple 4Ipados Iphone OsMac Os X+1 more Jun 17, 2026 Jun 9, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remote attacker may be able to leak memory.
CVE-2020-9832 1Apple 1Mac Os X Jun 17, 2026 Jun 9, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determine kernel memory layout.
CVE-2020-9831 1Apple 1Mac Os X Jun 17, 2026 Jun 9, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determine kernel memory layout.
CVE-2020-9815 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Jun 9, 2020 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-9794 1Apple 7Icloud IpadosIphone Os+4 more Jun 17, 2026 Jun 9, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2,...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A malicious application may cause a denial of service or potentially disclose memory contents.Show less
CVE-2020-9791 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Jun 9, 2020 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lea...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-13910 1Pengutronix 1Barebox Jun 17, 2026 Jun 7, 2020 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.
CVE-2020-13902 1Imagemagick 1Imagemagick Jun 17, 2026 Jun 7, 2020 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.
CVE-2020-13791 1Qemu 1Qemu Jun 17, 2026 Jun 4, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space.
CVE-2020-13790 2Libjpeg Turbo Mozilla 2Libjpeg Turbo Mozjpeg Jun 17, 2026 Jun 3, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
CVE-2019-14053 1Qualcomm 41Apq8009 Firmware Apq8053 FirmwareApq8096au Firmware+38 more Jun 17, 2026 Jun 2, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdrago...Show more When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCA4531, QCN7605, QCS605, QM215, SA415M, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130Show less
CVE-2019-14043 1Qualcomm 30Kamorta Firmware Mdm9150 FirmwareMdm9205 Firmware+27 more Jun 17, 2026 Jun 2, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S...Show more Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9150, MDM9205, MDM9650, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SA6155P, SC7180, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130Show less
CVE-2019-14042 1Qualcomm 23Kamorta Firmware Mdm9205 FirmwareNicobar Firmware+20 more Jun 17, 2026 Jun 2, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...Show more Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SA6155P, SC7180, SC8180X, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130Show less
CVE-2019-14039 1Qualcomm 22Apq8053 Firmware Apq8098 FirmwareMdm9206 Firmware+19 more Jun 17, 2026 Jun 2, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S...Show more Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, QCS605, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM670, SDM710, SDM845, SDX20, SDX24Show less
CVE-2019-14038 1Qualcomm 23Apq8009 Firmware Apq8053 FirmwareApq8098 Firmware+20 more Jun 17, 2026 Jun 2, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial...Show more Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, QCS605, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM670, SDM710, SDM845, SDX20, SDX24Show less
CVE-2020-9071 1Huawei 17Ar120 S Firmware Ar1200 S FirmwareAr1200 Firmware+14 more Jun 17, 2026 Jun 1, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulner...Show more There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00Show less
CVE-2020-11089 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 5.5 MEDIUM· v3 6.0 MEDIUM· v2 In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_writ...Show more In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.Show less

Previous 1...316317318...457 Next