Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2018-10-29 CVE-2018-17622 Out-of-bounds Read vulnerability in Foxitsoftware Phantompdf
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096.
network
low complexity
foxitsoftware CWE-125
6.5
2018-10-29 CVE-2017-18281 Out-of-bounds Read vulnerability in Google Android
A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel
local
low complexity
google CWE-125
5.5
2018-10-29 CVE-2018-18765 Out-of-bounds Read vulnerability in Cesanta Mongoose 6.13
An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13.
network
low complexity
cesanta CWE-125
critical
9.1
2018-10-29 CVE-2018-18764 Out-of-bounds Read vulnerability in Cesanta Mongoose 6.13
An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13.
network
low complexity
cesanta CWE-125
critical
9.1
2018-10-26 CVE-2018-18662 Out-of-bounds Read vulnerability in Artifex Mupdf 1.14.0
There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.
local
low complexity
artifex CWE-125
5.5
2018-10-23 CVE-2018-18605 Out-of-bounds Read vulnerability in multiple products
A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize.
local
low complexity
gnu debian netapp CWE-125
5.5
2018-10-23 CVE-2017-18304 Out-of-bounds Read vulnerability in multiple products
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 and SDX20
local
low complexity
qaulcomm qualcomm CWE-125
7.8
2018-10-23 CVE-2017-18294 Out-of-bounds Read vulnerability in Qualcomm products
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.
local
low complexity
qualcomm CWE-125
7.8
2018-10-22 CVE-2018-18581 Out-of-bounds Read vulnerability in Lupng Project Lupng 20170310
An issue has been found in LuPng through 2017-03-10.
network
low complexity
lupng-project CWE-125
8.8
2018-10-19 CVE-2018-18398 Out-of-bounds Read vulnerability in Xfce Thunar and Xfce
Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV.
local
high complexity
xfce CWE-125
4.7