VYPR

CWE-125

Out-of-bounds Read

BaseDraft

Description

The product reads data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-540

CVEs mapped to this weakness (9,427)

page 166 of 472
  • CVE-2018-9358HigNov 6, 2018
    risk 0.49cvss 7.5epss 0.02

    In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed…

  • CVE-2018-12821HigOct 17, 2018
    risk 0.49cvss 7.5epss 0.03

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-12820HigOct 17, 2018
    risk 0.49cvss 7.5epss 0.03

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-12819HigOct 17, 2018
    risk 0.49cvss 7.5epss 0.03

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-12818HigOct 17, 2018
    risk 0.49cvss 7.5epss 0.03

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-12816HigOct 17, 2018
    risk 0.49cvss 7.5epss 0.03

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-9503HigOct 2, 2018
    risk 0.49cvss 7.5epss 0.04

    In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android…

  • CVE-2018-12801HigSep 25, 2018
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-12778HigSep 25, 2018
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-12775HigSep 25, 2018
    risk 0.49cvss 7.5epss 0.05

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-14645HigSep 21, 2018
    risk 0.49cvss 7.5epss 0.03

    A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.

  • CVE-2018-16985HigSep 13, 2018
    risk 0.49cvss 7.5epss 0.01

    In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and MEM_read32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

  • CVE-2018-12826HigAug 29, 2018
    risk 0.49cvss 7.5epss 0.06

    Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-0409HigAug 15, 2018
    risk 0.49cvss 7.5epss 0.03

    A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage…

  • CVE-2017-9118HigAug 2, 2018
    risk 0.49cvss 7.5epss 0.03

    PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

  • CVE-2018-14736HigJul 30, 2018
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A buffer over-read can occur in pbc_wmessage_string in wmessage.c for PTYPE_ENUM.

  • CVE-2018-5066HigJul 20, 2018
    risk 0.49cvss 7.5epss 0.06

    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-5062HigJul 20, 2018
    risk 0.49cvss 7.5epss 0.06

    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-5026HigJul 20, 2018
    risk 0.49cvss 7.5epss 0.06

    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

  • CVE-2018-5025HigJul 20, 2018
    risk 0.49cvss 7.5epss 0.06

    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.