Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2017-09-25 CVE-2017-14733 Out-of-bounds Read vulnerability in multiple products
ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
network
low complexity
graphicsmagick debian CWE-125
6.5
2017-09-25 CVE-2017-14731 Out-of-bounds Read vulnerability in Libofx Project Libofx 0.9.12
ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.
network
low complexity
libofx-project CWE-125
6.5
2017-09-25 CVE-2015-5327 Out-of-bounds Read vulnerability in Linux Kernel 4.3
Out-of-bounds memory read in the x509_decode_time function in x509_cert_parser.c in Linux kernels 4.3-rc1 and after.
network
low complexity
linux CWE-125
6.5
2017-09-21 CVE-2017-9283 Out-of-bounds Read vulnerability in Microfocus Visibroker 8.5
An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5.
network
low complexity
microfocus CWE-125
critical
9.8
2017-09-21 CVE-2017-7544 Out-of-bounds Read vulnerability in Libexif Project Libexif
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.
network
low complexity
libexif-project CWE-125
critical
9.1
2017-09-21 CVE-2017-14646 Out-of-bounds Read vulnerability in Axiosys Bento4 1.5.0617
The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.
network
low complexity
axiosys CWE-125
7.5
2017-09-21 CVE-2017-14645 Out-of-bounds Read vulnerability in Bento4 1.5.0617
A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617.
network
low complexity
bento4 CWE-125
6.5
2017-09-21 CVE-2017-14643 Out-of-bounds Read vulnerability in Bento4 1.5.0617
The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h.
network
low complexity
bento4 CWE-125
6.5
2017-09-21 CVE-2017-11002 Out-of-bounds Read vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur.
local
low complexity
google CWE-125
5.5
2017-09-21 CVE-2017-14246 Out-of-bounds Read vulnerability in multiple products
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
network
low complexity
libsndfile-project debian CWE-125
8.1