← Back
CWE-125

9,102 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,102)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Sleuthkit
1The Sleuth Kit
Nov 21, 2024
Jun 5, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_make_data_run in tsk/fs/ntfs.c which could be lev...Show more
An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_make_data_run in tsk/fs/ntfs.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.Show less
1Sleuthkit
1The Sleuth Kit
Nov 21, 2024
Jun 5, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be...Show more
An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.Show less
1Sass Lang
1Libsass
Nov 21, 2024
Jun 4, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an attacker to disclose information or manipulated to re...Show more
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.Show less
1Sass Lang
1Libsass
Nov 21, 2024
Jun 4, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an attacker to disclose information or manipulate...Show more
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.Show less
1Sass Lang
1Libsass
Nov 21, 2024
Jun 4, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or man...Show more
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.Show less
1Natus
1Xltek Neuroworks
Nov 21, 2024
Jun 1, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial o...Show more
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.Show less
1Natus
1Xltek Neuroworks
Nov 21, 2024
Jun 1, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of serv...Show more
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.Show less
1Natus
1Xltek Neuroworks
Nov 21, 2024
Jun 1, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial o...Show more
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
Nov 21, 2024
May 31, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.
1Espruino
1Espruino
Nov 21, 2024
May 31, 2018
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsin...Show more
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsing of certain for loops in jsparse.c.Show less
1Espruino
1Espruino
Nov 21, 2024
May 31, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds Read during syntax parsing in which certain height validation is missing in libs/...Show more
Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds Read during syntax parsing in which certain height validation is missing in libs/graphics/jswrap_graphics.c.Show less
1Miniupnp Project
1Ngiflib
Nov 21, 2024
May 31, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.
2Debian
Taglib
2Debian Linux
Taglib
Nov 21, 2024
May 30, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.
1Libmobi Project
1Libmobi
Nov 21, 2024
May 30, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
1Libmobi Project
1Libmobi
Nov 21, 2024
May 30, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
1Libmobi Project
1Libmobi
Nov 21, 2024
May 30, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
1Libmobi Project
1Libmobi
Nov 21, 2024
May 30, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
2Canonical
Git Scm
2Git
Ubuntu Linux
Nov 21, 2024
May 30, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.
1Md4c Project
1Md4c
Nov 21, 2024
May 29, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
md_is_link_reference_definition_helper in md4c 0.2.5 has a heap-based buffer over-read because md_is_link_label mishandles loop termination.
1Md4c Project
1Md4c
Nov 21, 2024
May 29, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.