Vulnerabilities (CVE)

Filtered by CWE-125
Total 6546 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-7519 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-7528 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.
CVE-2016-7529 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file.
CVE-2016-7527 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-7525 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-7523 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-7524 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-7522 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-7520 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.
CVE-2016-7521 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVE-2016-7517 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file.
CVE-2016-7515 1 Imagemagick 1 Imagemagick 2024-07-03 4.3 MEDIUM 6.5 MEDIUM
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.
CVE-2024-3839 1 Google 1 Chrome 2024-07-03 N/A 6.5 MEDIUM
Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-21458 1 Qualcomm 222 Ar8035, Ar8035 Firmware, Csr8811 and 219 more 2024-07-02 N/A 7.5 HIGH
Information disclosure while handling SA query action frame.
CVE-2024-21462 1 Qualcomm 622 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 619 more 2024-07-02 N/A 5.5 MEDIUM
Transient DOS while loading the TA ELF file.
CVE-2024-21465 1 Qualcomm 518 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 515 more 2024-07-02 N/A 7.8 HIGH
Memory corruption while processing key blob passed by the user.
CVE-2024-21457 1 Qualcomm 222 Ar8035, Ar8035 Firmware, Csr8811 and 219 more 2024-07-02 N/A 7.5 HIGH
INformation disclosure while handling Multi-link IE in beacon frame.
CVE-2019-20503 3 Canonical, Debian, Usrsctp Project 3 Ubuntu Linux, Debian Linux, Usrsctp 2024-06-27 4.3 MEDIUM 6.5 MEDIUM
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
CVE-2024-38373 1 Amazon 1 Freertos-plus-tcp 2024-06-26 N/A 8.1 HIGH
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled. This vulnerability has been patched in version 4.1.1.
CVE-2024-30069 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-06-24 N/A 4.7 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability