Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2017-07-20 CVE-2017-7013 Out-of-bounds Read vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-125
7.8
2017-07-20 CVE-2017-7010 Out-of-bounds Read vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-125
7.8
2017-07-18 CVE-2017-11423 Out-of-bounds Read vulnerability in Libmspack Project Libmspack 0.5
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.
local
low complexity
libmspack-project CWE-125
5.5
2017-07-17 CVE-2017-11399 Out-of-bounds Read vulnerability in Ffmpeg
Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
local
low complexity
ffmpeg CWE-125
7.8
2017-07-17 CVE-2017-10987 Out-of-bounds Read vulnerability in Freeradius
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
network
low complexity
freeradius CWE-125
7.5
2017-07-17 CVE-2017-10982 Out-of-bounds Read vulnerability in Freeradius
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service.
network
low complexity
freeradius CWE-125
7.5
2017-07-17 CVE-2017-11367 Out-of-bounds Read vulnerability in Shoco Project Shoco 20170717
The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application crash) via malformed compressed data.
network
low complexity
shoco-project CWE-125
7.5
2017-07-17 CVE-2017-9814 Out-of-bounds Read vulnerability in multiple products
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
network
low complexity
cairographics opensuse CWE-125
7.5
2017-07-17 CVE-2017-11341 Out-of-bounds Read vulnerability in Libsass 3.4.5
There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5.
network
low complexity
libsass CWE-125
7.5
2017-07-17 CVE-2017-11336 Out-of-bounds Read vulnerability in Exiv2 0.26
There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26.
network
low complexity
exiv2 CWE-125
6.5