Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2017-03-20 CVE-2014-9844 Out-of-bounds Read vulnerability in multiple products
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
5.5
2017-03-17 CVE-2017-6969 Out-of-bounds Read vulnerability in GNU Binutils 2.28
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries.
network
low complexity
gnu CWE-125
critical
9.1
2017-03-16 CVE-2017-5667 Out-of-bounds Read vulnerability in multiple products
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
local
low complexity
qemu debian CWE-125
6.5
2017-03-15 CVE-2015-8897 Out-of-bounds Read vulnerability in Imagemagick
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a crafted png file.
local
low complexity
imagemagick CWE-125
5.5
2017-03-15 CVE-2017-6430 Out-of-bounds Read vulnerability in Ettercap-Project Ettercap
The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.
local
low complexity
ettercap-project CWE-125
5.5
2017-03-15 CVE-2016-10197 Out-of-bounds Read vulnerability in multiple products
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.
network
low complexity
debian libevent-project CWE-125
7.5
2017-03-15 CVE-2016-10195 Out-of-bounds Read vulnerability in multiple products
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.
network
low complexity
libevent-project debian CWE-125
critical
9.8
2017-03-15 CVE-2017-6851 Out-of-bounds Read vulnerability in Jasper Project Jasper
The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.
local
low complexity
jasper-project CWE-125
5.5
2017-03-15 CVE-2017-6840 Out-of-bounds Read vulnerability in Podofo Project Podofo 0.9.5
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
local
low complexity
podofo-project CWE-125
5.5
2017-03-15 CVE-2017-6437 Out-of-bounds Read vulnerability in Libplist Project Libplist 1.12
The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.
local
low complexity
libplist-project CWE-125
5.0