CWE-125: Out-of-bounds Read, page 154

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

1. 8.8CVE-2020-9683EPSS 4.0%2020-07-22

   Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.

2. 6.5CVE-2020-9679EPSS 4.8%2020-07-22

   Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.

3. 8.8CVE-2020-9677EPSS 4.5%2020-07-22

   Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.

4. 7.8CVE-2020-9675EPSS 4.4%2020-07-22

   Adobe Bridge versions 10.0.3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.

5. 7.5CVE-2020-15890EPSS 3.1%2020-07-21

   LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

6. 9.8CVE-2020-15889EPSS 2.2%2020-07-21

   Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.

7. 8.8CVE-2020-15888EPSS 2.4%2020-07-21

   Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.

8. 5.5CVE-2020-9649EPSS 2.6%2020-07-17

   Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

9. 8.1CVE-2019-20915EPSS 1.2%2020-07-16

   An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.

10. 8.1CVE-2019-20913EPSS 1.2%2020-07-16

    An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.

11. 8.1CVE-2019-20910EPSS 1.2%2020-07-16

    An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.

12. 7.5CVE-2020-15603EPSS 1.2%2020-07-15

    An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address…

13. 5.3CVE-2020-14700EPSS 0.5%2020-07-15

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high pri…

14. 5.3CVE-2020-14698EPSS 0.5%2020-07-15

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high pri…

15. 5.3CVE-2020-14695EPSS 0.5%2020-07-15

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high pri…

16. 5.3CVE-2020-14694EPSS 0.5%2020-07-15

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high pri…

17. 7.5CVE-2020-14676EPSS 0.5%2020-07-15

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high pri…

18. 7.5CVE-2020-15572EPSS 1.4%2020-07-15

    Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001.

19. 5.5CVE-2020-1342EPSS 6.4%2020-07-14

    An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerabili…

20. 7.5CVE-2020-10037EPSS 1.1%2020-07-14

    A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker might be able to gain read access to the…

21. 4.3CVE-2020-13131EPSS 0.5%2020-07-09

    An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. A malicious PIV token can misreport the …

22. 6.5CVE-2020-10756EPSS 0.5%2020-07-09

    An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows …

23. 6.5CVE-2020-12425EPSS 1.6%2020-07-09

    Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox < 78.

24. 6.5CVE-2020-12418EPSS 3.0%2020-07-09

    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.

25. 6.5CVE-2020-12407EPSS 1.0%2020-07-09

    Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content…

26. 7.8CVE-2020-12498EPSS 2.1%2020-07-01

    mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient inpu…

27. 7.5CVE-2020-15476EPSS 2.1%2020-07-01

    In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.

28. 9.1CVE-2020-15473EPSS 1.3%2020-07-01

    In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.

29. 9.1CVE-2020-15472EPSS 1.5%2020-07-01

    In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short.

30. 9.1CVE-2020-15471EPSS 1.3%2020-07-01

    In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c.

31. 7.8CVE-2020-5971EPSS 0.4%2020-06-30

    NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer, whic…

32. 7.8CVE-2020-7816EPSS 1.4%2020-06-30

    A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack over…

33. 7.8CVE-2020-15395EPSS 1.1%2020-06-30

    In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).

34. 7.5CVE-2020-9628EPSS 3.5%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

35. 7.5CVE-2020-9627EPSS 3.5%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

36. 7.5CVE-2020-9625EPSS 3.5%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

37. 3.3CVE-2020-9558EPSS 2.1%2020-06-26

    Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

38. 5.5CVE-2020-9557EPSS 2.6%2020-06-26

    Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

39. 3.3CVE-2020-9553EPSS 2.1%2020-06-26

    Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

40. 5.5CVE-2020-3809EPSS 2.3%2020-06-26

    Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

41. 5.5CVE-2020-9629EPSS 2.8%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

42. 3.3CVE-2020-9626EPSS 2.2%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

43. 5.5CVE-2020-9624EPSS 2.8%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

44. 7.5CVE-2020-9623EPSS 3.5%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

45. 5.5CVE-2020-9622EPSS 2.8%2020-06-26

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

46. 5.5CVE-2020-9617EPSS 2.8%2020-06-26

    Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

47. 5.5CVE-2020-9616EPSS 2.7%2020-06-26

    Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

48. 5.5CVE-2020-10769EPSS 0.5%2020-06-26

    A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte al…

49. 7.8CVE-2020-9661EPSS 3.6%2020-06-25

    Adobe After Effects versions 17.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .

50. 7.8CVE-2020-9655EPSS 6.2%2020-06-25

    Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .