Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,437)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-12067 1Potrace Project 1Potrace May 13, 2026 Aug 1, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
CVE-2017-11670 1Eapmd5pass Project 1Eapmd5pass May 13, 2026 Jul 31, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to cra...Show more A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic.Show less
CVE-2017-11669 1Eapmd5pass Project 1Eapmd5pass May 13, 2026 Jul 31, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash t...Show more An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.Show less
CVE-2017-11668 1Eapmd5pass Project 1Eapmd5pass May 13, 2026 Jul 31, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash t...Show more An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.Show less
CVE-2017-11547 1Timidity++ Project 1Timidity++ May 13, 2026 Jul 31, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mid file. NOTE: a crash might be relevant when using the --b...Show more The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a setuid-root installation.Show less
CVE-2017-11358 2Debian Sound Exchange Project 2Debian Linux Sound Exchange May 13, 2026 Jul 31, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.
CVE-2017-11119 1Nosefart Project 1Nosefart May 13, 2026 Jul 31, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file.
CVE-2017-11117 1Openexif Project 1Openexif May 13, 2026 Jul 31, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
CVE-2017-11116 1Openexif Project 1Openexif May 13, 2026 Jul 31, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
CVE-2017-11114 1Twibright 1Links May 13, 2026 Jul 31, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.
CVE-2017-11753 1Imagemagick 1Imagemagick May 13, 2026 Jul 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) fil...Show more The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file.Show less
CVE-2017-11734 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11731 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11730 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11729 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11728 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11722 1Graphicsmagick 1Graphicsmagick May 13, 2026 Jul 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual cont...Show more The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging statement executing outside of a loop, and consequently using an invalid array index corresponding to the loop's exit condition.Show less
CVE-2017-11719 1Ffmpeg 1Ffmpeg May 13, 2026 Jul 28, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNx...Show more The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file.Show less
CVE-2017-11714 2Artifex Debian 2Debian Linux Ghostscript May 13, 2026 Jul 28, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via...Show more psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c.Show less
CVE-2017-11704 1Libming 1Ming May 13, 2026 Jul 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.

Previous 1...494495496...522 Next