Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,136)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-11088 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVE-2020-11087 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.
CVE-2020-11086 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0.
CVE-2020-11085 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 3.5 LOW· v3 5.0 MEDIUM· v2 In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.
CVE-2020-11043 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 2.7 LOW· v3 5.0 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched in 2.1.0.
CVE-2020-11040 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.
CVE-2020-11019 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal...Show more In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.Show less
CVE-2020-11018 3Debian FreerdpOpensuse 3Debian Linux FreerdpLeap Jun 17, 2026 May 29, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in...Show more In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.Show less
CVE-2020-13362 4Canonical DebianOpensuse+1 more 4Debian Linux LeapQemu+1 more Jun 17, 2026 May 28, 2020 N/A· v4 3.2 LOW· v3 2.1 LOW· v2 In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
CVE-2020-13253 3Canonical DebianQemu 3Debian Linux QemuUbuntu Linux Jun 17, 2026 May 27, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.
CVE-2020-13439 1Rockcarry 1Ffjpeg Jun 17, 2026 May 24, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
CVE-2020-13438 1Rockcarry 1Ffjpeg Jun 17, 2026 May 24, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
CVE-2020-13397 4Canonical DebianFreerdp+1 more 4Debian Linux FreerdpLeap+1 more Jun 17, 2026 May 22, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.
CVE-2020-13396 4Canonical DebianFreerdp+1 more 4Debian Linux FreerdpLeap+1 more Jun 17, 2026 May 22, 2020 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.
CVE-2020-13112 4Canonical DebianLibexif Project+1 more 4Debian Linux LeapLibexif+1 more Jun 17, 2026 May 21, 2020 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
CVE-2020-6458 2Debian Google 2Chrome Debian Linux Jun 17, 2026 May 21, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2020-10724 3Canonical DpdkFedoraproject 3Data Plane Development Kit FedoraUbuntu Linux Jun 17, 2026 May 19, 2020 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.
CVE-2020-10030 1Powerdns 1Recursor Jun 17, 2026 May 19, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memory content via a stack...Show more An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname() does not have '\0' termination of the returned string if the hostname is larger than the supplied buffer. (Linux systems are not affected because the buffer is always large enough. OpenBSD systems are not affected because the returned hostname always has '\0' termination.) Under some conditions, this issue can lead to the writing of one '\0' byte out-of-bounds on the stack, causing a denial of service or possibly arbitrary code execution.Show less
CVE-2020-13143 5Canonical DebianLinux+2 more 24A700s Firmware Active Iq Unified ManagerBootstrap Os+21 more Jun 17, 2026 May 18, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out...Show more gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.Show less
CVE-2020-11526 4Canonical DebianFreerdp+1 more 4Debian Linux FreerdpLeap+1 more Jun 17, 2026 May 15, 2020 N/A· v4 2.2 LOW· v3 3.5 LOW· v2 libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.

Previous 1...317318319...457 Next