Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,482)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-13618 1Gpac 1Gpac Jun 17, 2026 Jul 16, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.
CVE-2019-13617 1F5 1Njs Jun 17, 2026 Jul 16, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call a...Show more njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call.Show less
CVE-2019-13616 6Canonical DebianFedoraproject+3 more 13Backports Sle Debian LinuxEnterprise Linux+10 more Jun 17, 2026 Jul 16, 2019 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVE-2019-13615 1Videolan 1Vlc Media Player Jun 17, 2026 Jul 16, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.
CVE-2019-1010295 2Linaro Trustedfirmware 2Op Tee Op Tee Jun 17, 2026 Jul 15, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure of memory content. The component is: optee_os. The fixed version is: 3.4.0 and later.
CVE-2019-1010004 1Sound Exchange Project 1Sound Exchange Jun 17, 2026 Jul 15, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted...Show more SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.Show less
CVE-2019-12529 5Canonical DebianFedoraproject+2 more 5Debian Linux FedoraLeap+2 more Jun 17, 2026 Jul 11, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode det...Show more An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checking its table. The length is then used to start decoding the string. There are no checks to ensure that the length it calculates isn't greater than the input buffer. This leads to adjacent memory being decoded as well. An attacker would not be able to retrieve the decoded data unless the Squid maintainer had configured the display of usernames on error pages.Show less
CVE-2019-13504 2Debian Exiv2 2Debian Linux Exiv2 Jun 17, 2026 Jul 11, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.
CVE-2019-13503 1Cesanta 1Mongoose Jun 17, 2026 Jul 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read.
CVE-2019-13470 1Matrixssl 1Matrixssl Jun 17, 2026 Jul 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling.
CVE-2019-2116 1Google 1Android Jun 17, 2026 Jul 8, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction...Show more In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117105007.Show less
CVE-2019-13391 1Imagemagick 1Imagemagick Jun 17, 2026 Jul 7, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels.
CVE-2019-13312 1Ffmpeg 1Ffmpeg Jun 17, 2026 Jul 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVE-2019-13303 2Imagemagick Opensuse 2Imagemagick Leap Jun 17, 2026 Jul 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage.
CVE-2019-13302 2Imagemagick Opensuse 2Imagemagick Leap Jun 17, 2026 Jul 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.
CVE-2019-13299 2Imagemagick Opensuse 2Imagemagick Leap Jun 17, 2026 Jul 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
CVE-2019-13297 4Canonical DebianImagemagick+1 more 4Debian Linux ImagemagickLeap+1 more Jun 17, 2026 Jul 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled.
CVE-2019-13295 4Canonical DebianImagemagick+1 more 4Debian Linux ImagemagickLeap+1 more Jun 17, 2026 Jul 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
CVE-2019-13291 1Glyphandcog 1Xpdfreader Jun 17, 2026 Jul 4, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow...Show more In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure.Show less
CVE-2019-13287 1Glyphandcog 1Xpdfreader Jun 17, 2026 Jul 4, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdfto...Show more In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16368.Show less

Previous 1...419420421...525 Next