← Back
CWE-125

9,119 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,119)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-19497
3Debian
FedoraprojectSleuthkit
3Debian Linux
FedoraThe Sleuth Kit
Nov 21, 2024
Nov 29, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ m...Show more
In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).Show less
CVE-2018-15980
1Adobe
1Photoshop Cc
Nov 21, 2024
Nov 29, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Photoshop CC versions 19.1.6 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-15978
2Adobe
Redhat
5Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+2 more
Nov 21, 2024
Nov 29, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-8789
3Canonical
DebianFreerdp
3Debian Linux
FreerdpUbuntu Linux
Jun 17, 2026
Nov 29, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).
CVE-2018-19664
1Libjpeg Turbo
1Libjpeg Turbo
Nov 21, 2024
Nov 29, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.
CVE-2018-19662
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
Nov 21, 2024
Nov 29, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.
CVE-2018-19661
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
Nov 21, 2024
Nov 29, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.
CVE-2018-19627
2Debian
Wireshark
2Debian Linux
Wireshark
Nov 21, 2024
Nov 29, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.
CVE-2018-19626
2Debian
Wireshark
2Debian Linux
Wireshark
Nov 21, 2024
Nov 29, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
CVE-2018-19625
2Debian
Wireshark
2Debian Linux
Wireshark
Nov 21, 2024
Nov 29, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.
CVE-2018-5916
1Qualcomm
35Mdm9206 Firmware
Mdm9607 FirmwareMdm9615 Firmware+32 more
Jun 17, 2026
Nov 28, 2018
N/A· v4
6.5 MEDIUM· v3
6.1 MEDIUM· v2
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MD...Show more
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.Show less
CVE-2017-18315
1Qualcomm
1Sd 600 Firmware
Nov 21, 2024
Nov 28, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.
CVE-2017-11078
1Google
1Android
Nov 21, 2024
Nov 27, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bounds read can occur in boot.
CVE-2018-19566
1Dcraw Project
1Dcraw
Nov 21, 2024
Nov 26, 2018
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
CVE-2018-19565
1Dcraw Project
1Dcraw
Nov 21, 2024
Nov 26, 2018
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
CVE-2018-19543
4Canonical
DebianJasper Project+1 more
5Debian Linux
JasperLinux Enterprise Desktop+2 more
Nov 21, 2024
Nov 26, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
CVE-2018-19541
4Canonical
DebianJasper Project+1 more
5Debian Linux
JasperLinux Enterprise Desktop+2 more
Nov 21, 2024
Nov 26, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26...Show more
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.Show less
CVE-2018-19535
4Canonical
DebianExiv2+1 more
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+3 more
Nov 21, 2024
Nov 26, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
CVE-2018-19519
1Tcpdump
1Tcpdump
Nov 21, 2024
Nov 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
CVE-2018-19517
1Sysstat Project
1Sysstat
Nov 21, 2024
Nov 24, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.