Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2019-04-29 CVE-2019-3561 Out-of-bounds Read vulnerability in Facebook Hhvm
Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory.
network
low complexity
facebook CWE-125
7.5
2019-04-29 CVE-2019-11598 Out-of-bounds Read vulnerability in Imagemagick 7.0.840
In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.
5.8
2019-04-29 CVE-2019-11597 Out-of-bounds Read vulnerability in Imagemagick 7.0.843
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.
5.8
2019-04-29 CVE-2016-10749 Out-of-bounds Read vulnerability in Cjson Project Cjson
parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character.
network
low complexity
cjson-project CWE-125
7.5
2019-04-28 CVE-2019-11579 Out-of-bounds Read vulnerability in multiple products
dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.
network
low complexity
dhcpcd-project debian CWE-125
5.0
2019-04-23 CVE-2019-11473 Out-of-bounds Read vulnerability in Graphicsmagick 1.3.31
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
network
low complexity
graphicsmagick CWE-125
6.5
2019-04-22 CVE-2019-11455 Out-of-bounds Read vulnerability in multiple products
A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters.
8.1
2019-04-20 CVE-2019-11373 Out-of-bounds Read vulnerability in multiple products
An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
network
low complexity
mediaarea fedoraproject CWE-125
6.5
2019-04-20 CVE-2019-11372 Out-of-bounds Read vulnerability in multiple products
An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
network
low complexity
mediaarea fedoraproject CWE-125
6.5
2019-04-19 CVE-2019-2040 Out-of-bounds Read vulnerability in Google Android 9.0
In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.
local
google CWE-125
4.7