CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- fraunhoferhhi vvdec Fraunhofer HHI VVdeC through 3.2.1 Heap Out-of-Bounds Read via CodingStructure::getColInfo 5.7 Medium
- fraunhoferhhi vvdec Fraunhofer HHI VVdeC before 3.2.1 Heap Out-of-Bounds Read via SEIReader::xParseSEIScalableNesting 6.9 Medium
- open-quantum-safe liboqs liboqs: Heap out-of-bounds read in LMS/HSS signature verification via unvalidated signature length (hss_verify_inc.c:215) 5.3 Medium
- amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 more Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser 7.2 High
- gstreamer gst-plugins-good Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsing 6.1 Medium
- libyal libvmdk libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds 4.8 Medium
- pavel-odintsov fastnetmon FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read 8.2 High
- pavel-odintsov fastnetmon FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read 7.5 High
- pavel-odintsov fastnetmon FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser 8.2 High
- pavel-odintsov fastnetmon FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames 8.2 High
- signalwire freeswitch FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling 7.5 High
- signalwire freeswitch FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing 2.7 Low
- signalwire freeswitch FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing 7.5 High
- signalwire freeswitch FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing 7.5 High
- esa asn1scc ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT() 8.1 High
- esa asn1scc ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders 5.3 Medium
- leejet stable-diffusion.cpp stable-diffusion.cpp: Out-of-bounds read in safetensors loader: unvalidated data_offsets allow a tensor's byte range to extend past the end of the file 6.9 Medium
- openppl ppl.nn OpenPPL ppl.nn CUDA Optimizer opt_graph.cc InitQuantization out-of-bounds 5.3 Medium
- samsung exynos 1280, exynos 1330, exynos 1380 +15 more +17 more Improper handling of NAS DLTransport messages may lead to a baseband crash. No score
- veracrypt VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path) 8.8 High
- automattic mongoose Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c) 6.5 Medium
- ibm watson speech services cartridge IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx 5.3 Medium
- ibm watson speech services cartridge IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. 7.5 High
- zephyrproject zephyr Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory 7.8 High
- mchehab zbar ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.c 6.9 Medium
- github enterprise server Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service 5.3 Medium
- google chrome Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... No score
- google chrome Out of bounds read in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read... 3.3 Low
- google chrome Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... No score
- google chrome Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who... 8.3 High
- google chrome Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... No score
- google chrome Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 8.3 High
- google chrome Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote... No score
- google chrome Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote... 8.3 High
- willamowius gnugk GNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handler 6.3 Medium
- willamowius gnugk GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing 6.3 Medium
- wlroots wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c 4.8 Medium
- hdfgroup hdf5 Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse 6.9 Medium
- nvidia slurm NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API... 6.3 Medium
- hdfgroup hdf5 Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize 1.9 Low
- hdfgroup hdf5, the hdf group szip filter +1 more Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter 4.7 Medium
- amd compressionator sdk An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local... 5.2 Medium
- amd compressionator sdk A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an... 5.2 Medium
- freerdp FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer() 5.3 Medium
- freerdp FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder 5.3 Medium
- d3tn gmbh µd3tn Out-of-bounds Read in µD3TN 7.1 High
- ntpsec Out-of-bounds Read in NTPsec 3.7 Low
- bitdefender pybddisasm Out-of-bounds reads during instruction decoding in pybddisasm 4.8 Medium
- Show olderLoading…