Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,134)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-8005 1Adobe 2Acrobat Dc Acrobat Reader Dc Jun 17, 2026 Aug 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-...Show more Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .Show less
CVE-2019-8004 1Adobe 2Acrobat Dc Acrobat Reader Dc Jun 17, 2026 Aug 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-...Show more Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .Show less
CVE-2019-8002 1Adobe 2Acrobat Dc Acrobat Reader Dc Jun 17, 2026 Aug 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-...Show more Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .Show less
CVE-2019-2136 1Google 1Android Jun 17, 2026 Aug 20, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User inter...Show more In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-132650049.Show less
CVE-2019-2135 1Google 1Android Jun 17, 2026 Aug 20, 2019 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User in...Show more In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-125900276.Show less
CVE-2019-2129 1Google 1Android Jun 17, 2026 Aug 20, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges nee...Show more In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-124781927.Show less
CVE-2019-15147 1Gopro 1Gpmf Parser Jun 17, 2026 Aug 18, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
CVE-2019-15146 1Gopro 1Gpmf Parser Jun 17, 2026 Aug 18, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
CVE-2019-15145 5Canonical DebianDjvulibre Project+2 more 5Debian Linux DjvulibreFedora+2 more Jun 17, 2026 Aug 18, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in li...Show more DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.Show less
CVE-2019-15142 5Canonical DebianDjvulibre Project+2 more 5Debian Linux DjvulibreFedora+2 more Jun 17, 2026 Aug 18, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by craf...Show more In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.Show less
CVE-2019-15141 2Imagemagick Opensuse 2Imagemagick Leap Jun 17, 2026 Aug 18, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRew...Show more WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.Show less
CVE-2019-15139 1Imagemagick 1Imagemagick Jun 17, 2026 Aug 18, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in...Show more The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.Show less
CVE-2019-15090 3Canonical LinuxOpensuse 3Leap Linux KernelUbuntu Linux Jun 17, 2026 Aug 16, 2019 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read.
CVE-2019-13513 1Deltaww 1Delta Industrial Automation Dopsoft Jun 17, 2026 Aug 15, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote co...Show more In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote code execution, or crash of the application.Show less
CVE-2019-13512 1Fujielectric 1Frenic Loader Jun 17, 2026 Aug 15, 2019 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limited information from the device.
CVE-2019-13222 2Debian Stb Vorbis Project 2Debian Linux Stb Vorbis Jun 17, 2026 Aug 15, 2019 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.
CVE-2019-1153 1Microsoft 9Office Windows 10Windows 7+6 more Jun 17, 2026 Aug 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to furt...Show more An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.Show less
CVE-2019-1148 1Microsoft 9Office Windows 10Windows 7+6 more Jun 17, 2026 Aug 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to furt...Show more An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.Show less
CVE-2019-15058 1Stb Project 1Stb Jun 17, 2026 Aug 14, 2019 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load, leading to Information Disclosure or Denial of Service.
CVE-2019-15050 1Axiosys 1Bento4 Jun 17, 2026 Aug 14, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_AvccAtom class at Core/Ap4AvccAtom.cpp.

Previous 1...348349350...457 Next