VYPR

CWE-125

Out-of-bounds Read

BaseDraft

Description

The product reads data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-540

CVEs mapped to this weakness (9,413)

page 152 of 471
  • CVE-2020-12674HigAug 12, 2020
    risk 0.49cvss 7.5epss 0.06

    In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.

  • CVE-2020-12673HigAug 12, 2020
    risk 0.49cvss 7.5epss 0.06

    In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.

  • CVE-2020-0254HigAug 11, 2020
    risk 0.49cvss 7.5epss 0.00

    There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751

  • CVE-2020-0251HigAug 11, 2020
    risk 0.49cvss 7.5epss 0.00

    There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626

  • CVE-2020-3700HigJul 30, 2020
    risk 0.49cvss 7.5epss 0.01

    Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile,…

  • CVE-2020-15890HigJul 21, 2020
    risk 0.49cvss 7.5epss 0.03

    LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

  • CVE-2020-15603HigJul 15, 2020
    risk 0.49cvss 7.5epss 0.01

    An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash.

  • CVE-2020-14676HigJul 15, 2020
    risk 0.49cvss 7.5epss 0.01

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the…

  • CVE-2020-15572HigJul 15, 2020
    risk 0.49cvss 7.5epss 0.01

    Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001.

  • CVE-2020-10037HigJul 14, 2020
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing…

  • CVE-2020-9628HigJun 26, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-9627HigJun 26, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-9625HigJun 26, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-9623HigJun 26, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-9601HigJun 25, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-9600HigJun 25, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-9599HigJun 25, 2020
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2020-11899MedKEVJun 17, 2020
    risk 0.49cvss 5.4epss 0.19

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

  • CVE-2019-20838HigJun 15, 2020
    risk 0.49cvss 7.5epss 0.03

    libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

  • CVE-2020-0597HigJun 15, 2020
    risk 0.49cvss 7.5epss 0.03

    Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.