Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,090)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-7939 1Entropymine 1Imageworsener May 13, 2026 Apr 18, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file.
CVE-2016-5309 2Broadcom Symantec 15Advanced Threat Protection CsapiEmail Security.cloud+12 more May 13, 2026 Apr 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (...Show more The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.Show less
CVE-2017-7854 1Radare 1Radare2 May 13, 2026 Apr 13, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
CVE-2016-9959 4Game Music Emu Project OpensuseOpensuse Project+1 more 9Game Music Emu LeapLeap+6 more May 13, 2026 Apr 12, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVE-2017-7716 1Radare 1Radare2 May 13, 2026 Apr 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
CVE-2017-3060 1Adobe 1Flash Player May 13, 2026 Apr 12, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3053 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of the APP13 segment in JP...Show more Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of the APP13 segment in JPEG files.Show less
CVE-2017-3052 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta fil...Show more Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format.Show less
CVE-2017-3051 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of JPEG files....Show more Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of JPEG files. Successful exploitation could lead to arbitrary code execution.Show less
CVE-2017-3046 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to contiguous code-stream parsing.
CVE-2017-3045 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to the palette box.
CVE-2017-3033 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream tile data.
CVE-2017-3032 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 code-stream parser.
CVE-2017-3031 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine.
CVE-2017-3022 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when parsing the header of a JPEG 2000 file.
CVE-2017-3021 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser engine.
CVE-2017-3019 1Adobe 4Acrobat Acrobat DcAcrobat Reader Dc+1 more May 13, 2026 Apr 12, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Success...Show more Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Successful exploitation could lead to arbitrary code execution.Show less
CVE-2017-7697 2Debian Libsamplerate Project 2Debian Linux Libsamplerate May 13, 2026 Apr 11, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.
CVE-2014-9837 1Imagemagick 1Imagemagick May 13, 2026 Apr 11, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.
CVE-2014-8716 1Imagemagick 1Imagemagick May 13, 2026 Apr 11, 2017 N/A· v4 6.2 MEDIUM· v3 2.1 LOW· v2 The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).

Previous 1...436437438...455 Next