Out-of-bounds Read — CVEs by weakness type

Linux Kernel HIGH 7.5

CVE-2017-7558

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions …

Fix: after 4.13

Fix from $1,950 2018-07-26

Ubuntu Linux MEDIUM 6.5

CVE-2018-13988

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demons…

Fix: after 0.62.0

Fix from $1,600 2018-07-25

Bento4 HIGH 8.8

CVE-2018-14584

An issue has been discovered in Bento4 1.5.1-624. AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read.

No fix yet

Fix from $1,950 2018-07-24

Bento4 HIGH 8.8

CVE-2018-14585

An issue has been discovered in Bento4 1.5.1-624. AP4_BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4_…

No fix yet

Fix from $1,950 2018-07-24

Bento4 HIGH 8.8

CVE-2018-14587

An issue has been discovered in Bento4 1.5.1-624. AP4_MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read.

No fix yet

Fix from $1,950 2018-07-24

Bento4 HIGH 8.8

CVE-2018-14589

An issue has been discovered in Bento4 1.5.1-624. AP4_Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read.

No fix yet

Fix from $1,950 2018-07-24

Debian Linux CRITICAL 9.8

CVE-2018-1999010

FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can resu…

Fix: 3.4.3+

Fix from $2,300 2018-07-23

Ffmpeg MEDIUM 6.5

CVE-2018-1999014

FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in …

Fix: after 4.0.1

Fix from $1,600 2018-07-23

Ffmpeg MEDIUM 6.5

CVE-2018-1999015

FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in …

Fix: after 4.0.1

Fix from $1,600 2018-07-23

Thulac CRITICAL 9.8

CVE-2018-14565

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/…

Fix: after 2018-02-25

Fix from $2,300 2018-07-23

Aubio HIGH 8.8

CVE-2018-14523

An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.

No fix yet

Fix from $1,950 2018-07-23

Bento4 CRITICAL 9.8

CVE-2018-14532

An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.c…

Mitigation only

Fix from $2,300 2018-07-23

Bento4 MEDIUM 5.5

CVE-2018-14544

There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attacke…

Mitigation only

Fix from $1,600 2018-07-23

Bento4 MEDIUM 5.5

CVE-2018-14545

There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers…

Mitigation only

Fix from $1,600 2018-07-23

Acrobat Dc HIGH 7.5

CVE-2018-5066EPSS 8%