VYPR

CWE-125

Out-of-bounds Read

BaseDraft

Description

The product reads data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-540

CVEs mapped to this weakness (9,795)

page 486 of 490
  • CVE-2022-1908HigMay 27, 2022
    risk 0.00cvss 8.1epss 0.01

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

  • CVE-2022-1907HigMay 27, 2022
    risk 0.00cvss 8.1epss 0.01

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

  • CVE-2022-1899CriMay 26, 2022
    risk 0.00cvss 9.1epss 0.01

    Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.

  • CVE-2022-1851HigMay 25, 2022
    risk 0.00cvss 7.8epss 0.02

    Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-1769HigMay 17, 2022
    risk 0.00cvss 7.8epss 0.00

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

  • CVE-2022-1587CriMay 16, 2022
    risk 0.00cvss 9.1epss 0.03

    An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

  • CVE-2022-1586CriMay 16, 2022
    risk 0.00cvss 9.1epss 0.03

    An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was…

  • CVE-2022-1714HigMay 13, 2022
    risk 0.00cvss 7.1epss 0.00

    Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

  • CVE-2022-29368HigMay 12, 2022
    risk 0.00cvss 7.1epss 0.01

    Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.

  • CVE-2022-1623MedMay 11, 2022
    risk 0.00cvss 5.5epss 0.01

    LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

  • CVE-2022-1622MedMay 11, 2022
    risk 0.00cvss 5.5epss 0.02

    LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

  • CVE-2022-1629HigMay 10, 2022
    risk 0.00cvss 7.8epss 0.02

    Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution

  • CVE-2022-1534HigApr 29, 2022
    risk 0.00cvss 7.1epss 0.00

    Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a…

  • CVE-2022-1533HigApr 29, 2022
    risk 0.00cvss 7.8epss 0.00

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.

  • CVE-2022-1441HigApr 25, 2022
    risk 0.00cvss 7.8epss 0.01

    MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content…

  • CVE-2022-1452HigApr 24, 2022
    risk 0.00cvss 7.1epss 0.01

    Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other…

  • CVE-2022-1451HigApr 24, 2022
    risk 0.00cvss 7.1epss 0.01

    Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory…

  • CVE-2022-1427HigApr 23, 2022
    risk 0.00cvss 7.8epss 0.00

    Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.

  • CVE-2022-1297CriApr 11, 2022
    risk 0.00cvss 9.1epss 0.01

    Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.

  • CVE-2022-1296CriApr 11, 2022
    risk 0.00cvss 9.1epss 0.01

    Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.