VYPR

CWE-125

Out-of-bounds Read

BaseDraft

Description

The product reads data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-540

CVEs mapped to this weakness (9,427)

page 164 of 472
  • CVE-2019-9640HigMar 9, 2019
    PHP
    PHP
    risk 0.49cvss 7.5epss 0.06

    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

  • CVE-2019-9638HigMar 9, 2019
    PHP
    PHP
    risk 0.49cvss 7.5epss 0.07

    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.

  • CVE-2019-8270HigMar 8, 2019
    Ultravnc
    Ultravnc
    risk 0.49cvss 7.5epss 0.02

    UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211.

  • CVE-2019-8267HigMar 8, 2019
    Ultravnc
    Ultravnc
    risk 0.49cvss 7.5epss 0.02

    UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1208.

  • CVE-2019-9038HigFeb 23, 2019
    Matio
    matio
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.

  • CVE-2019-9029HigFeb 23, 2019
    Matio
    matio
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.

  • CVE-2019-9024HigFeb 22, 2019
    PHP
    PHP
    risk 0.49cvss 7.5epss 0.06

    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.

  • CVE-2019-9022HigFeb 22, 2019
    PHP
    PHP
    risk 0.49cvss 7.5epss 0.04

    An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data.…

  • CVE-2018-9592HigFeb 11, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges…

  • CVE-2018-9591HigFeb 11, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…

  • CVE-2018-9590HigFeb 11, 2019
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges…

  • CVE-2018-16890HigFeb 6, 2019
    Curl
    Libcurl
    risk 0.49cvss 7.5epss 0.05

    libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow…

  • CVE-2018-19723HigJan 28, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Note: A different vulnerability than CVE-2018-19721.

  • CVE-2018-19722HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.02

    Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-19706HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.03

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-19701HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-19699HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16047HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16041HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read…

  • CVE-2018-16038HigJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.49cvss 7.5epss 0.04

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a out-of-bounds read…