Browse CVEs

HIGH 7.5 CVE-2020-36279 Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c. Fedora 1.80.0+ Fix from $1,9502021-03-12 HIGH 7.5 CVE-2020-36280 Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c. Fedora 1.80.0+ Fix from $1,9502021-03-12 MEDIUM 5.5 CVE-2021-0463 In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to loc… Android Mitigation only Fix from $1,6002021-03-10 MEDIUM 6.5 CVE-2021-0379 In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information di… Android Patch available Fix from $1,6002021-03-10 MEDIUM 5.5 CVE-2021-0394 In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l… Android Mitigation only Fix from $1,6002021-03-10 MEDIUM 6.5 CVE-2021-0368 In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure … Android Mitigation only Fix from $1,6002021-03-10 MEDIUM 6.7 CVE-2021-0371 In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati… Android Mitigation only Fix from $1,6002021-03-10 MEDIUM 6.5 CVE-2021-0378 In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclos… Android Mitigation only Fix from $1,6002021-03-10 HIGH 7.5 CVE-2020-1918 In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the… Hhvm 4.56.3 / 4.80.2+ Fix from $1,9502021-03-10 HIGH 7.5 CVE-2020-1919 Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the firs… Hhvm 4.56.3 / 4.80.2+ Fix from $1,9502021-03-10 MEDIUM 5.3 CVE-2021-28116EPSS 13% Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol dat… Fedora after 5.0.5 Fix from $1,6002021-03-09 HIGH 7.5 CVE-2021-20275 A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service. Debian Linux 3.0.32+ Fix from $1,9502021-03-09 HIGH 7.1 CVE-2021-27364 An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileg… Linux Kernel 4.4.260 / 4.9.260+ Fix from $1,9502021-03-07 CRITICAL 9.8 CVE-2020-28636 A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2… Fedora Mitigation only Fix from $2,3002021-03-04 CRITICAL 9.8 CVE-2020-35628 A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2… Fedora Mitigation only Fix from $2,3002021-03-04 CRITICAL 9.8 CVE-2020-35636 A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::re… Debian Linux No fix yet Fix from $2,3002021-03-04 CRITICAL 9.8 CVE-2020-28601 A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/… Fedora Mitigation only Fix from $2,3002021-03-04 MEDIUM 6.5 CVE-2020-28591 An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 9… Fedora No fix yet Fix from $1,6002021-03-03 HIGH 7.8 CVE-2021-22638 Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a spec… Fvdesigner after 1.5.76 Fix from $1,9502021-03-03 HIGH 7.1 CVE-2021-26926 A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or … Fedora 2.0.25+ Fix from $1,9502021-02-23 HIGH 7.8 CVE-2021-22643 Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Lux… Keyshot 10.1+ Fix from $1,9502021-02-23 MEDIUM 6.0 CVE-2020-3664 Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $1,6002021-02-22 CRITICAL 9.1 CVE-2020-11275 Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdra… Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 CRITICAL 9.1 CVE-2020-11276 Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA … Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 HIGH 7.8 CVE-2020-11195 Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 CRITICAL 9.8 CVE-2021-27362 The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which migh… Wpg 3.1.0.0+ Fix from $2,3002021-02-17 HIGH 7.8 CVE-2020-12380 Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authentic… Bmc Firmware 2.47+ Fix from $1,9502021-02-17 HIGH 7.8 CVE-2021-21049 Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Read vulnerability when parsing a specially c… Photoshop after 22.1.1 Fix from $1,9502021-02-11 HIGH 7.8 CVE-2021-21050 Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Read vulnerability when parsing a specially c… Photoshop after 22.1.1 Fix from $1,9502021-02-11 MEDIUM 6.5 CVE-2021-21042EPSS 15% Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-boun… Acrobat after 20.013.20074 Fix from $1,6002021-02-11