Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,437)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-11052 1Google 1Android May 13, 2026 Oct 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor command a buffer over-rea...Show more In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor command a buffer over-read can occur.Show less
CVE-2017-15045 1Lame Project 1Lame May 13, 2026 Oct 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different v...Show more LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410.Show less
CVE-2017-15037 1Freebsd 1Freebsd May 13, 2026 Oct 5, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p->t_name strings to lack a final '\0' character.
CVE-2017-15021 1Gnu 1Binutils May 13, 2026 Oct 5, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and a...Show more bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.Show less
CVE-2017-15020 1Gnu 1Binutils May 13, 2026 Oct 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have...Show more dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.Show less
CVE-2017-15018 1Lame Project 1Lame May 13, 2026 Oct 5, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c.
CVE-2017-0812 1Google 1Android May 13, 2026 Oct 4, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An elevation of privilege vulnerability in the Android media framework (audio hal). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231.
CVE-2017-14976 2Debian Freedesktop 2Debian Linux Poppler May 13, 2026 Oct 2, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a de...Show more The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.Show less
CVE-2017-14939 1Gnu 1Binutils May 13, 2026 Sep 30, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (hea...Show more decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte.Show less
CVE-2017-14931 1Openexif Project 1Openexif May 13, 2026 Sep 30, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted JPEG file.
CVE-2017-14860 1Exiv2 1Exiv2 May 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
CVE-2017-14795 1Libbpg Project 1Libbpg May 13, 2026 Sep 28, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted BPG file,...Show more The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hls_pcm_sample in hevc.c in libavcodec in FFmpeg and put_pcm_var in hevcdsp_template.c in libavcodec in FFmpeg.Show less
CVE-2017-14733 2Debian Graphicsmagick 2Debian Linux Graphicsmagick May 13, 2026 Sep 25, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via...Show more ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.Show less
CVE-2017-14731 1Libofx Project 1Libofx May 13, 2026 Sep 25, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.
CVE-2015-5327 1Linux 1Linux Kernel May 13, 2026 Sep 25, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Out-of-bounds memory read in the x509_decode_time function in x509_cert_parser.c in Linux kernels 4.3-rc1 and after.
CVE-2017-9283 1Microfocus 1Visibroker May 13, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
CVE-2017-7544 1Libexif Project 1Libexif May 13, 2026 Sep 21, 2017 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry...Show more libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.Show less
CVE-2017-14646 1Axiosys 1Bento4 May 13, 2026 Sep 21, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.c...Show more The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.Show less
CVE-2017-14645 1Bento4 1Bento4 May 13, 2026 Sep 21, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service.
CVE-2017-14643 1Bento4 1Bento4 May 13, 2026 Sep 21, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h.

Previous 1...485486487...522 Next