Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,091)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-14128 1Gnu 1Binutils May 13, 2026 Sep 4, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer...Show more The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.Show less
CVE-2017-14122 2Debian Rarlab 2Debian Linux Unrar May 13, 2026 Sep 3, 2017 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.
CVE-2017-13672 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Sep 1, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display u...Show more QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.Show less
CVE-2017-13769 3Canonical DebianImagemagick 3Debian Linux ImagemagickUbuntu Linux May 13, 2026 Aug 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.
CVE-2017-13765 2Debian Wireshark 2Debian Linux Wireshark May 13, 2026 Aug 30, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation.
CVE-2017-13757 1Gnu 1Binutils May 13, 2026 Aug 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read...Show more The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.Show less
CVE-2017-13755 2Debian Sleuthkit 2Debian Linux The Sleuth Kit May 13, 2026 Aug 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls.
CVE-2017-13744 1Liblouis 1Liblouis May 13, 2026 Aug 29, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
CVE-2017-13738 1Liblouis 1Liblouis May 13, 2026 Aug 29, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
CVE-2017-12954 1Libgig0 1Libgig May 13, 2026 Aug 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.
CVE-2017-12951 1Libgig0 1Libgig May 13, 2026 Aug 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file.
CVE-2017-13139 3Canonical DebianImagemagick 3Debian Linux ImagemagickUbuntu Linux May 13, 2026 Aug 23, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
CVE-2017-13134 1Imagemagick 1Imagemagick May 13, 2026 Aug 23, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-12967 1Gnu 1Binutils May 13, 2026 Aug 19, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and applic...Show more The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.Show less
CVE-2017-12963 1Libsass 1Libsass May 13, 2026 Aug 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's...Show more There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix (available from GitHub after 2017-07-24).Show less
CVE-2017-12958 1Gnu 1Pspp May 13, 2026 Aug 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVE-2017-12957 1Exiv2 1Exiv2 May 13, 2026 Aug 18, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.
CVE-2017-12956 1Exiv2 1Exiv2 May 13, 2026 Aug 18, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
CVE-2017-8268 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buff...Show more In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read.Show less
CVE-2017-8256 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.

Previous 1...424425426...455 Next