地图 / 缓冲区越界读

缓冲区越界读

Buffer Over-read · 内存破坏

内存破坏 / 缓冲区越界读

67公开报告

—CWE 编号

0已标注发现方式

67关联报告

发现方式分布

暂无发现方式标注。

关联报告

Heap Buffer Overflow (READ: 4) in phar_parse_pharfileInternet Bug Bounty · 2020-10-10 · 中危 · 72 票 Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflowInternet Bug Bounty · 2020-10-12 · 中危 · $1,500 · 58 票 CVE-2024-7264: ASN.1 date parser overreadcurl · 2024-08-01 · 低危 · 53 票 CVE-2024-7347: Buffer overread in the ngx_http_mp4_moduleInternet Bug Bounty · 2024-08-27 · 低危 · $2,142 · 43 票 apache access.log leakage via long request on https://rapida.ru/QIWI · — · 未评级 · 42 票 CVE-2025-9086: Out of bounds read for cookie pathcurl · 2025-09-10 · 低危 · 36 票 Heap-Buffer-Overread in contains_whitespace when calling parser_validate after supplying a maliciously crafted buffer to parser_parseCosmos · 2024-11-19 · 未评级 · $2,000 · 34 票 curl: stack-buffer overread during punycode conversionsInternet Bug Bounty · 2024-09-22 · 低危 · 31 票 Out-of-bounds read in HTTP method handling causes undefined behavior and potential crash This is sharp, Gaurav. We’ve got a real memory-safety bug inscurl · 2025-11-20 · 中危 · 28 票 Heap-OOB read in urlapi `redirect_url()` via `CURLU_GUESS_SCHEME` + `CURLU_NO_GUESS_SCHEME` flowcurl · 2026-05-25 · 未评级 · 27 票 CVE-2024-6874: macidn punycode buffer overreadcurl · 2024-07-24 · 低危 · 25 票 SMTP header injection via C-escape `\r` in the recipient display nameNextcloud · 2026-10-18 · 低危 · 23 票 Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TOcurl · 2025-08-20 · 低危 · 23 票 При передаче в ID сообщения нулевого байта, происходит вывод какого-то буфера.Mail.ru · — · 未评级 · $3,500 · 23 票 ap_find_token() Buffer OverreadInternet Bug Bounty · 2017-08-10 · 低危 · 22 票 Heap Buffer Overflow in Curl_memdup0() via CURLOPT_COPYPOSTFIELDS/CURLOPT_POSTFIELDSIZE Mismatchcurl · 2025-08-09 · 中危 · 19 票 Security check failure or stack buffer overrun (crash)Notepad++ · 2019-05-06 · 低危 · 18 票 Heap Memory Disclosure via Integer Underflow in Item_func_json_arrayagg::cut_max_length in MariaDB ServerMariaDB · 2026-09-15 · 未评级 · 16 票 Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)Internet Bug Bounty · 2021-08-25 · 低危 · $2,000 · 15 票 reading the stack data of the imap processOpen-Xchange · — · 未评级 · $50 · 14 票 Index Out Of Bounds in protobuf unmarshallingKubernetes · 2021-08-30 · 低危 · $250 · 13 票 Buffer out of bound read in miniupnpc xml parserMonero · 2018-04-25 · 低危 · 13 票 tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.cInternet Bug Bounty · 2021-07-23 · 低危 · $500 · 12 票 Squid leaks previous content from reusable bufferInternet Bug Bounty · 2021-08-26 · 中危 · 12 票 Heap Buffer Overflow (READ: 1786) in exif_iif_add_valueInternet Bug Bounty · 2018-06-01 · 低危 · 11 票 CVE-2017-13008 The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().Internet Bug Bounty · 2019-10-08 · 中危 · 11 票 Buffer over read from `smtp_command_parse_parameters`Open-Xchange · — · 未评级 · $50 · 9 票 Buffer over-reads in i_stream_zlib_readOpen-Xchange · — · 未评级 · $50 · 9 票 Heap Buffer Over-read in lib/http2.c (on_header) handling PUSH_PROMISE framescurl · 2025-12-28 · 中危 · 8 票 Buffer over-read,, Missing NUL termination in addvariable() causes undefined behaviorcurl · 2025-10-31 · 未评级 · 8 票 Out of Bounds Memory Read in php_jpg_get16Internet Bug Bounty · 2020-11-09 · 高危 · $1,500 · 8 票 CVE-2026-107928: info leak uploading over WebSockets with GnuTLScurl · 2026-10-14 · 低危 · 7 票 Integer-underflow leads to heap over-read in TFTP implementationcurl · 2026-01-14 · 低危 · 7 票 The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()Internet Bug Bounty · 2021-08-22 · 中危 · 7 票 heap buffer overflow in phar_detect_phar_fname_extInternet Bug Bounty · 2020-10-10 · 高危 · 7 票 CVE-2017-12986 The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().Internet Bug Bounty · 2019-10-08 · 中危 · 7 票 Out of Bounds Memory Read in unserialize()Internet Bug Bounty · 2018-11-27 · 低危 · 7 票 Invalid Read on exif_process_SOFnInternet Bug Bounty · 2020-10-10 · 中危 · 6 票 CVE-2026-10536: HTTP/2 stream-dependency tree UAFcurl · 2026-06-24 · 低危 · 5 票 Read beyond bounds in mod_isapi.c [zhbug_httpd_41]Internet Bug Bounty · 2022-07-09 · 低危 · 5 票 OOB read in libuvNode.js · 2021-07-05 · 低危 · 5 票 Incomplete fix for CVE-2020-12673 : Specially crafted NTML message leads to buffer over readOpen-Xchange · — · 未评级 · $400 · 5 票 Pre-auth buffer over-read in Dovecot NTLM implementationOpen-Xchange · — · 未评级 · $550 · 5 票 CVE-2017-1000101: cURL: URL globbing out of bounds readInternet Bug Bounty · 2018-05-16 · 低危 · 5 票 CVE-2017-13041 The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().Internet Bug Bounty · 2021-07-09 · 中危 · $500 · 4 票 CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()Internet Bug Bounty · 2021-08-22 · 中危 · 4 票 Heap-buffer-overflow in Perl__byte_dump_string (utf8.c) could lead to memory leakInternet Bug Bounty · 2019-10-24 · 中危 · 4 票 Out of bounds read in libcurl's IMAP FETCH response parserInternet Bug Bounty · 2018-05-16 · 未评级 · 4 票 CVE-2017-13010 The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().Internet Bug Bounty · 2019-10-08 · 中危 · 4 票 CVE-2017-13009 The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().Internet Bug Bounty · 2019-10-08 · 中危 · 4 票 CVE-2017-11367: Global buffer overflow (READ of size 4) in shoco C libraryInternet Bug Bounty · 2019-10-04 · 未评级 · 4 票 h1 hacky holidays CTF solutionh1-ctf · 2021-01-11 · 高危 · 3 票 CVE-2017-13040 The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.Internet Bug Bounty · 2021-07-09 · 中危 · $500 · 3 票 CVE-2020-9383 Floppy OOB readInternet Bug Bounty · 2021-08-22 · 中危 · $750 · 3 票 A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module for decodingNode.js third-party modules · 2019-04-28 · 中危 · 3 票 GarlicRust - heartbleed style vulnerability in major I2P C++ router implementationsInternet Bug Bounty · 2019-11-12 · 中危 · 3 票 CVE-2017-13038 The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().Internet Bug Bounty · 2019-10-08 · 中危 · 3 票 Buffer overread off by one in `rpa_read_buffer`, incomplete fix for CVE-2020-12674Open-Xchange · — · 未评级 · $400 · 2 票 Buffer overread in parse_angle_addr called from message_address_parse_pathOpen-Xchange · — · 未评级 · $50 · 2 票 Multiple buffer over reads in mbox_from_parseOpen-Xchange · — · 未评级 · $50 · 2 票 CVE-2017-13019: The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()Internet Bug Bounty · 2021-08-22 · 中危 · 2 票 OOB read in php_strip_tags_exInternet Bug Bounty · 2020-11-09 · 低危 · $500 · 2 票 buffer overread in base64 code of the xmlrpc moduleInternet Bug Bounty · 2020-11-09 · 低危 · $500 · 2 票 Out-Of-Bounds Read in timelib_meridian()Internet Bug Bounty · 2019-10-14 · 低危 · $500 · 2 票 CVE-2017-12985: The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in ip6_print()Internet Bug Bounty · 2019-10-08 · 中危 · 2 票 PHP WDDX Deserialization Heap OOB Read in timelib_meridian()Internet Bug Bounty · 2019-10-14 · 低危 · $500 · 2 票 [bl] Uninitialized memory exposure via negative .consume()Node.js third-party modules · 2020-08-27 · 中危 · 1 票