CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- teamviewer dex, digital employee experience +1 moreOut-of-bounds read vulnerability in Content Distribution Service5.4 Medium
- monkey-project monkeyAn out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit...7.5 High
- monkey-project monkeyAn out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit...7.5 High
- monkey-project monkeyAn out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit...7.5 High
- monkey-project monkeyAn out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit...7.5 High
- monkey-project monkeyAn out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server...7.5 High
- apple ipados, macos, pages +2 more +4 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26...4.3 Medium
- apple ipados, keynote, macos +2 more +4 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26,...5.5 Medium
- color iccdeviccDEV has a heap-buffer-overflow in icXmlParseTextString()6.1 Medium
- oneflowA segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers...6.5 Medium
- oneflowA segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to...6.5 Medium
- rinnegatamante lpp-vitaOut-of-bounds read in lpp-vita7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGlib: glib: local denial of service via buffer underflow in content type parsing2.8 Low
- beckhoff automation beckhoff.device.manager.xar, mdp for beckhoff rt linux(r), mdp software package for twincat/bsd +2 moreBeckhoff: Information leak via Beckhoff Device Manager5.3 Medium
- cadaver turso3dOut-of-bounds write in turso3d10.0 Critical
- turanszkij wickedengineA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.9.3 Critical
- turanszkij wickedengineA stack overflow vulnerability in turanszkij/WickedEngine5.1 Medium
- praydog uevrA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in praydog/UEVR6.9 Medium
- root-project rootAn improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c9.3 Critical
- rootAn improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c9.3 Critical
- cloverhackycolor cloverbootloaderA Out-of-bounds Read vulnerability in CloverHackyColor/CloverBootloader6.9 Medium
- bytecodealliance wasmtimeWasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-644.1 Medium
- linux, linux kernel +1 morelibceph: prevent potential out-of-bounds reads in handle_auth_done()9.8 Critical
- sumatrapdfreader sumatrapdfSumatraPDF's Integer Underflow in PalmDbReader Leads to Crash5.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver2.4 Low
scalycrates.ioscaly: Multiple soundness issues in Rust safe APIs8.7 High- gpacAn out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to...7.5 High
- gpacGPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function.8.2 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a heap-buffer-overflow in urb_select_configuration5.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a global-buffer-overflow in crypto_base64_decode5.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreFreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call5.6 Medium
- linux, linux kernel +1 moremedia: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()7.1 High
- linux, linux kernel +1 moreRDMA/irdma: avoid invalid read in irdma_net_event7.1 High
- linux, linux kernel +1 morelibceph: make decode_pool() more resilient against corrupted osdmaps9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: hns3: add VLAN id validation before using8.8 High
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote...8.8 High
- blurams dome flare firmwareA vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier...6.1 Medium
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Read (CWE-125)5.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreOut-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System5.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreOut-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System5.3 Medium
- adobe substance 3d designerSubstance3D - Designer | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows NDIS Information Disclosure Vulnerability4.3 Medium
- microsoft excel, office, 365 apps +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc for mac 2021 +2 more +4 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreCapability Access Management Service (camsvc) Information Disclosure Vulnerability6.2 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2022, 23h2 edition (server core installation) +5 more +7 moreCapability Access Management Service (camsvc) Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreTPM Trustlet Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows rndismp6.sys Information Disclosure Vulnerability4.6 Medium
- Show moreLoading…