Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2018-11-28 CVE-2018-5916 Out-of-bounds Read vulnerability in Qualcomm products
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.
low complexity
qualcomm CWE-125
6.5
2018-11-28 CVE-2017-18315 Out-of-bounds Read vulnerability in Qualcomm SD 600 Firmware
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.
local
low complexity
qualcomm CWE-125
7.8
2018-11-27 CVE-2017-11078 Out-of-bounds Read vulnerability in Google Android
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bounds read can occur in boot.
local
low complexity
google CWE-125
7.8
2018-11-26 CVE-2018-19566 Out-of-bounds Read vulnerability in Dcraw Project Dcraw 7.00/9.28
A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
local
low complexity
dcraw-project CWE-125
7.1
2018-11-26 CVE-2018-19565 Out-of-bounds Read vulnerability in Dcraw Project Dcraw 7.00/9.28
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
local
low complexity
dcraw-project CWE-125
7.1
2018-11-26 CVE-2018-19543 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in JasPer 2.0.14.
local
low complexity
jasper-project canonical debian suse CWE-125
7.8
2018-11-26 CVE-2018-19541 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16.
network
low complexity
jasper-project canonical suse debian CWE-125
8.8
2018-11-26 CVE-2018-19535 Out-of-bounds Read vulnerability in multiple products
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
network
low complexity
exiv2 debian redhat canonical CWE-125
6.5
2018-11-24 CVE-2018-19517 Out-of-bounds Read vulnerability in Sysstat Project Sysstat 12.1.1
An issue was discovered in sysstat 12.1.1.
local
low complexity
sysstat-project CWE-125
5.5
2018-11-21 CVE-2018-19416 Out-of-bounds Read vulnerability in Sysstat Project Sysstat 12.1.1
An issue was discovered in sysstat 12.1.1.
local
low complexity
sysstat-project CWE-125
7.8