Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,103)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-14589 1Axiosys 1Bento4 Nov 21, 2024 Jul 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue has been discovered in Bento4 1.5.1-624. AP4_Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read.
CVE-2018-14587 1Axiosys 1Bento4 Nov 21, 2024 Jul 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue has been discovered in Bento4 1.5.1-624. AP4_MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read.
CVE-2018-14585 1Axiosys 1Bento4 Nov 21, 2024 Jul 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue has been discovered in Bento4 1.5.1-624. AP4_BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4_Stz2Atom class.
CVE-2018-14584 1Axiosys 1Bento4 Nov 21, 2024 Jul 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue has been discovered in Bento4 1.5.1-624. AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read.
CVE-2018-1999015 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jul 23, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially...Show more FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to have been fixed in 5aba5b89d0b1d73164d3b81764828bb8b20ff32a and later.Show less
CVE-2018-1999014 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jul 23, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF fil...Show more FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been fixed in bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 and later.Show less
CVE-2018-1999010 2Debian Ffmpeg 2Debian Linux Ffmpeg Nov 21, 2024 Jul 23, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be e...Show more FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in cced03dd667a5df6df8fd40d8de0bff477ee02e8 and later.Show less
CVE-2018-14565 1Thunlp 1Thulac Nov 21, 2024 Jul 23, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.
CVE-2018-14545 1Axiosys 1Bento4 Nov 21, 2024 Jul 23, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerabilit...Show more There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts.Show less
CVE-2018-14544 1Axiosys 1Bento4 Nov 21, 2024 Jul 23, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerabil...Show more There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts.Show less
CVE-2018-14532 1Axiosys 1Bento4 Nov 21, 2024 Jul 23, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp after a call from Mp42Hls.cpp, a related issue to CVE-2018-13846.
CVE-2018-14523 3Aubio OpensuseSuse 3Aubio LeapLinux Enterprise Nov 21, 2024 Jul 23, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.
CVE-2018-5068 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5066 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5063 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5062 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5061 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5060 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5056 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
CVE-2018-5055 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jul 20, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less

Previous 1...387388389...456 Next