Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,161)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1455 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVE-2011-1445 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-1192 1Google 1Chrome Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-1122 1Google 1Chrome Apr 29, 2026 Mar 1, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71960.
CVE-2011-1120 1Google 1Chrome Apr 29, 2026 Mar 1, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71717.
CVE-2011-1113 1Google 1Chrome Apr 29, 2026 Mar 1, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-0984 2Debian Google 2Chrome Debian Linux Apr 29, 2026 Feb 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2010-4577 4Debian FedoraprojectGoogle+1 more 5Chrome Chrome OsDebian Linux+2 more Apr 29, 2026 Dec 22, 2010 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly par...Show more The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."Show less
CVE-2009-2523 1Microsoft 1Windows 2000 Apr 23, 2026 Nov 11, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer...Show more The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."Show less
CVE-2007-3847 3Apache CanonicalFedoraproject 4Fedora Fedora CoreHttp Server+1 more Apr 23, 2026 Aug 23, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted dat...Show more The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.Show less
CVE-2006-6016 1Wordpress 1Wordpress Apr 23, 2026 Nov 21, 2006 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.
CVE-2006-5393 1Cisco 1Secure Desktop Apr 23, 2026 Oct 18, 2006 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user...Show more Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.Show less
CVE-2004-1940 1Wirlab 1Kphone Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read.
CVE-2004-0112 244d AppleAvaya+21 more 65Aaa Server Access RegistrarApache Based Web Server+62 more Apr 16, 2026 Nov 23, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de...Show more The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.Show less
CVE-2004-0421 4Libpng OpenpkgRedhat+1 more 6Enterprise Linux Enterprise Linux DesktopLibpng+3 more Apr 16, 2026 Aug 18, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creatin...Show more The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.Show less
CVE-2004-0221 1Openbsd 1Openbsd Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as...Show more isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.Show less
CVE-2004-0184 1Tcpdump 1Tcpdump Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than...Show more Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.Show less
CVE-2004-0183 1Tcpdump 1Tcpdump Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by t...Show more TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.Show less
CVE-1999-0006 1Qualcomm 1Qpopper Apr 16, 2026 Jul 14, 1998 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVE-1999-0029 1Sgi 1Irix Apr 16, 2026 Jul 16, 1997 N/A· v4 8.4 HIGH· v3 7.2 HIGH· v2 root privileges via buffer overflow in ordist command on SGI IRIX systems.

Previous 1...455 456 457458459 Next