← Back
CWE-125

9,090 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,090)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Openexif Project
1Openexif
May 13, 2026
Jul 31, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
1Openexif Project
1Openexif
May 13, 2026
Jul 31, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
1Twibright
1Links
May 13, 2026
Jul 31, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.
1Imagemagick
1Imagemagick
May 13, 2026
Jul 30, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) fil...Show more
The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file.Show less
1Libming
1Ming
May 13, 2026
Jul 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
1Libming
1Ming
May 13, 2026
Jul 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
1Libming
1Ming
May 13, 2026
Jul 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
1Libming
1Ming
May 13, 2026
Jul 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
1Libming
1Ming
May 13, 2026
Jul 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
1Graphicsmagick
1Graphicsmagick
May 13, 2026
Jul 28, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual cont...Show more
The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging statement executing outside of a loop, and consequently using an invalid array index corresponding to the loop's exit condition.Show less
1Ffmpeg
1Ffmpeg
May 13, 2026
Jul 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNx...Show more
The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file.Show less
2Artifex
Debian
2Debian Linux
Ghostscript
May 13, 2026
Jul 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via...Show more
psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c.Show less
1Libming
1Ming
May 13, 2026
Jul 28, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
1Mpg123
1Mpg123
May 13, 2026
Jul 27, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file.
-
-
Nov 7, 2023
Jul 27, 2017
N/A· v4
N/A· v3
N/A· v2
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All ref...Show more
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usageShow less
1Surina
1Soundtouch
May 13, 2026
Jul 27, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted w...Show more
The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file.Show less
1Artifex
1Ghostscript Ghostxps
May 13, 2026
Jul 26, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspec...Show more
The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.Show less
2Artifex
Debian
2Debian Linux
Ghostscript Ghostxps
May 13, 2026
Jul 26, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other im...Show more
The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.Show less
2Artifex
Debian
2Debian Linux
Ghostscript Ghostxps
May 13, 2026
Jul 26, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified...Show more
The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.Show less
2Artifex
Debian
2Debian Linux
Ghostscript Ghostxps
May 13, 2026
Jul 26, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other im...Show more
The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.Show less