Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,103)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15844 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash.Show less
CVE-2017-15825 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, an out of bounds memory access may potentially occur.
CVE-2018-17072 1Json++ Project 1Json++ Nov 21, 2024 Sep 16, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.
CVE-2018-11058 2Dell Oracle 13Application Testing Suite BsafeBsafe Crypto C+10 more Nov 21, 2024 Sep 14, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when pa...Show more RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.Show less
CVE-2018-16985 1Lizard Project 1Lizard Nov 21, 2024 Sep 13, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and MEM_read32. The vulnerability causes a segmentation fault an...Show more In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and MEM_read32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.Show less
CVE-2018-16982 1Byvoid 1Open Chinese Convert Nov 21, 2024 Sep 13, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a craft...Show more Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.Show less
CVE-2018-16790 1Mongodb 1Libbson Nov 3, 2025 Sep 10, 2018 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
CVE-2018-16764 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::catch_all heap-based buffer over-read.Show less
CVE-2018-16667 1Contiki Ng 1Contiki Ng. Nov 21, 2024 Sep 7, 2018 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL (lvm_register_variable, lvm_set_variable_value, create_intersection, create_union).
CVE-2018-1000668 1Jsish 1Jsish Nov 21, 2024 Sep 6, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via T...Show more jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.Show less
CVE-2018-16438 1Hdfgroup 1Hdf5 Nov 21, 2024 Sep 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
CVE-2018-16430 2Debian Gnu 2Debian Linux Libextractor Nov 21, 2024 Sep 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
CVE-2018-16429 2Canonical Gnome 2Glib Ubuntu Linux Nov 21, 2024 Sep 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().
CVE-2018-16427 1Opensc Project 1Opensc Nov 21, 2024 Sep 4, 2018 N/A· v4 4.3 MEDIUM· v3 2.1 LOW· v2 Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.
CVE-2018-16413 1Imagemagick 1Imagemagick Nov 21, 2024 Sep 3, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function.
CVE-2018-16412 2Imagemagick Opensuse 2Imagemagick Leap Nov 21, 2024 Sep 3, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
CVE-2018-16403 1Elfutils Project 1Elfutils Nov 21, 2024 Sep 3, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
CVE-2018-16382 1Nasm 1Netwide Assembler Nov 21, 2024 Sep 3, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c.
CVE-2018-16368 1Xpdfreader 1Xpdf Nov 21, 2024 Sep 3, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
CVE-2018-16336 3Canonical DebianExiv2 3Debian Linux Exiv2Ubuntu Linux Nov 21, 2024 Sep 2, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999.

Previous 1...384385386...456 Next