Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,437)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-11662 1Mindwerks 1Wildmidi May 13, 2026 Aug 17, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
CVE-2017-11661 1Mindwerks 1Wildmidi May 13, 2026 Aug 17, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
CVE-2017-8258 1Google 1Android May 13, 2026 Aug 11, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.
CVE-2017-0725 1Google 1Android May 13, 2026 Aug 9, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.
CVE-2017-12640 2Debian Imagemagick 2Debian Linux Imagemagick May 13, 2026 Aug 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.
CVE-2017-6418 1Clamav 1Clamav May 13, 2026 Aug 7, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message.
CVE-2017-12599 2Debian Opencv 2Debian Linux Opencv May 13, 2026 Aug 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
CVE-2017-12598 2Debian Opencv 2Debian Linux Opencv May 13, 2026 Aug 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as...Show more OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.Show less
CVE-2017-12596 1Openexr 1Openexr May 13, 2026 Aug 7, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...Show more In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.Show less
CVE-2017-12458 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds hea...Show more The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file.Show less
CVE-2017-12456 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
CVE-2017-12455 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a...Show more The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.Show less
CVE-2017-12454 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via...Show more The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.Show less
CVE-2017-12453 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a cr...Show more The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.Show less
CVE-2017-12452 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out...Show more The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.Show less
CVE-2017-12451 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause...Show more The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file.Show less
CVE-2017-12449 1Gnu 1Binutils May 13, 2026 Aug 4, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read...Show more The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file.Show less
CVE-2017-9770 1Razerzone 1Razer Synapse May 13, 2026 Aug 2, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read operation to occur due to a field within the IOCTL data being used as a length.
CVE-2017-11334 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Aug 2, 2017 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qe...Show more The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.Show less
CVE-2017-12142 1Ytnef Project 1Ytnef May 13, 2026 Aug 2, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

Previous 1...493494495...522 Next