Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,119)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16083 2Google Redhat 4Chrome Enterprise Linux DesktopEnterprise Linux Server+1 more Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2018-16082 2Google Redhat 4Chrome Enterprise Linux DesktopEnterprise Linux Server+1 more Nov 21, 2024 Jan 9, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2018-16076 2Google Redhat 4Chrome Enterprise Linux DesktopEnterprise Linux Server+1 more Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
CVE-2017-15428 1Google 1Chrome Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a...Show more Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Show less
CVE-2017-15401 1Google 1Chrome Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to execute arbitrary code inside a sandbox via...Show more A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Show less
CVE-2016-10403 1Google 1Chrome Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
CVE-2019-5747 2Busybox Canonical 2Busybox Ubuntu Linux Jun 17, 2026 Jan 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack...Show more An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.Show less
CVE-2018-20679 2Busybox Canonical 2Busybox Ubuntu Linux Jun 9, 2025 Jan 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sendin...Show more An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking/udhcp/common.c that 4-byte options are indeed 4 bytes.Show less
CVE-2019-5718 2Debian Wireshark 2Debian Linux Wireshark Jun 17, 2026 Jan 8, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.
CVE-2019-5007 1Foxitsoftware 2Foxit Reader Phantompdf Jun 17, 2026 Jan 3, 2019 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.
CVE-2018-16885 2Linux Redhat 2Enterprise Linux Server Linux Kernel Nov 21, 2024 Jan 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases...Show more A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. This issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7.Show less
CVE-2019-3574 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Jan 2, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel.
CVE-2019-3572 1Libming 1Libming Jun 17, 2026 Jan 2, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call...Show more An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.Show less
CVE-2018-6340 1Facebook 1Hhvm Jun 17, 2026 Dec 31, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30...Show more The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).Show less
CVE-2018-20618 1Ok File Formats Project 1Ok File Formats May 6, 2025 Dec 31, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.
CVE-2018-20591 1Libming 1Libming Nov 21, 2024 Dec 30, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx.
CVE-2018-20588 1Otfcc Project 1Otfcc Nov 21, 2024 Dec 30, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read.
CVE-2018-20570 2Debian Jasper Project 2Debian Linux Jasper Nov 21, 2024 Dec 28, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
CVE-2018-20553 1Broadcom 1Tcpreplay Nov 21, 2024 Dec 28, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
CVE-2018-20552 1Broadcom 1Tcpreplay Nov 21, 2024 Dec 28, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.

Previous 1...373374375...456 Next