Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,490)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-20089 1Gopro 1Gpmf Parser Jun 17, 2026 Dec 30, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
CVE-2019-20088 1Gopro 1Gpmf Parser Jun 17, 2026 Dec 30, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
CVE-2019-20087 1Gopro 1Gpmf Parser Jun 17, 2026 Dec 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.
CVE-2019-20086 1Gopro 1Gpmf Parser Jun 17, 2026 Dec 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
CVE-2019-20021 2Fedoraproject Upx 2Fedora Upx Jun 17, 2026 Dec 27, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
CVE-2019-20020 1Matio Project 1Matio Jun 17, 2026 Dec 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.
CVE-2019-20018 1Matio Project 1Matio Jun 17, 2026 Dec 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.
CVE-2019-20017 1Matio Project 1Matio Jun 17, 2026 Dec 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.
CVE-2019-20011 2Gnu Opensuse 3Backports Sle LeapLibredwg Jun 17, 2026 Dec 27, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.
CVE-2019-20005 1Ezxml Project 1Ezxml Jun 17, 2026 Dec 26, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() start...Show more An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished).Show less
CVE-2019-19977 1Libesmtp Project 1Libesmtp Jun 17, 2026 Dec 26, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
CVE-2019-19957 1Mz Automation 1Libiec61850 Jun 17, 2026 Dec 24, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufPos and elementLength.
CVE-2019-19953 3Debian GraphicsmagickOpensuse 4Backports Debian LinuxGraphicsmagick+1 more Jun 17, 2026 Dec 24, 2019 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.
CVE-2019-19949 4Canonical DebianImagemagick+1 more 4Debian Linux ImagemagickLeap+1 more Jun 17, 2026 Dec 24, 2019 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
CVE-2019-19944 1Mz Automation 1Libiec61850 Jun 17, 2026 Dec 23, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos.
CVE-2019-18390 4Debian OpensuseRedhat+1 more 4Debian Linux Enterprise LinuxLeap+1 more Jun 17, 2026 Dec 23, 2019 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.
CVE-2019-11050 6Canonical DebianFedoraproject+3 more 7Debian Linux FedoraLeap+4 more Aug 17, 2026 Dec 23, 2019 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will caus...Show more When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.Show less
CVE-2019-11047 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraPhp+1 more Jun 17, 2026 Dec 23, 2019 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will caus...Show more When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.Show less
CVE-2019-11046 6Canonical DebianFedoraproject+3 more 7Debian Linux FedoraLeap+4 more Aug 17, 2026 Dec 23, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string cont...Show more In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations.Show less
CVE-2019-16465 1Adobe 2Acrobat Dc Acrobat Reader Dc Jun 17, 2026 Dec 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulner...Show more Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .Show less

Previous 1...397398399...525 Next