9256 matches found
hdf5: multiple CVEs
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...
hdf5: heap buffer overread
Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5toolsstrsprint in /hdf5/tools/lib/h5toolsstr.c...
hdf5: multiple CVEs
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...
hdf5: multiple CVEs
HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...
hdf5: multiple CVEs
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...
hdf5: multiple CVEs
HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...
The vulnerability of the SGIRleDecode.c component in the Pillow library for rendering raster graphics allows a hacker to cause a service failure.
The vulnerability of the SGIRleDecode.c component in the Pillow library for rendering raster graphics is related to reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Windows Kernel-mode Driver driver allows attackers to increase their privileges.
The vulnerability of the Windows Kernel-Mode Driver driver in the operating system involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to reading data beyond the allowed buffer limits, allows attackers to cause service failures.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to reading data beyond the acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...
The vulnerability of the enic_main.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the enicmain.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
CLSA-2025-1744223313 tigervnc: Fix of 3 CVEs
CVE-2024-31080: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIGetSelectedEvents by avoiding byte-swapped length values in replies - CVE-2024-9632: xorg-x11-server: fix improperly tracked allocation size in XkbSetCompatMap to prevent buffer overflow condition -...
UBUNTU-CVE-2025-32460
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call...
The vulnerability of the MP3 Stream Handler component in the Live555 multimedia streaming library allows a attacker to cause a service failure.
The vulnerability of the MP3 Stream Handler component in the Live555 multimedia streaming library lies in its ability to read data from buffers beyond acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerabilities of the functions CLARRV(), DLARRV(), SLARRV(), and ZLARRV() in the Linear Algebra Package Library LAPACK, as well as the Linear Algebra Package Library OpenBLAS, allow attackers to gain access to confidential data and cause service interruptions.
The vulnerability of the functions CLARRV, DLARRV, SLARRV, and ZLARRV in the LAPACK linear algebra library is related to reading data beyond the allowed buffer size limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service...
CVE-2025-32460
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call...
GraphicsMagick 安全漏洞
GraphicsMagick is GraphicsMagick open source set of simple image processing tools. It provides resizing, rotation, highlighting, and more. A security vulnerability exists in GraphicsMagick versions prior to 8e56520, which stems from a heap buffer over-read...
CVE-2025-26676
Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...