CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- color iccdeviccDEV has a heap-based buffer overflow write in CIccCLUT::Interp3d()5.5 Medium
- color iccdeviccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence()6.1 Medium
- color iccdeviccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert()6.1 Medium
- color iccdeviccDEV has a heap-buffer-overflow read in CIccXmlArrayType<>6.1 Medium
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreGDI+ Information Disclosure Vulnerability7.5 High
- microsoft 365 copilot, office for android, windows 10 version 1607 +29 more +31 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Extensible File Allocation Table Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 morePush message Routing Service Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8 High
- microsoft .net, .net 10.0, .net 9.0 +2 more +4 more.NET Denial of Service Vulnerability7.5 High
- imagemagickImageMagick has a heap Buffer Over-Read in BilateralBlurImage4.4 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick has an integer overflow in DIB coder can result in out of bounds read or write8.1 High
- imagemagickImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder4.8 Medium
- deltaww commgr2Buffer Over-read DoS Vulnerability in COMMGR27.5 High
- libsshlibssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds6.9 Medium
- xlnt-community xlntxlnt-community xlnt Encrypted XLSX File compound_document.cpp read_directory out-of-bounds4.8 Medium
- xlnt-community xlntxlnt-community xlnt XLSX File compound_document.cpp xsgetn out-of-bounds4.8 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker6.1 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: gnu binutils: information disclosure via specially crafted xcoff object file6.1 Medium
- ettercap-project ettercapEttercap etterfilter ef_output.c add_data_segment out-of-bounds4.8 Medium
- huawei harmonyosOut-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this...4.0 Medium
- google chromeInappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a...8.8 High
- linux, linux kernel +1 moref2fs: fix out-of-bounds access in sysfs attribute read/write7.1 High
libcrux-ml-dsacrates.iolibcrux: Panic in Signature Hint Decoding During Verification8.7 Highlibcrux-poly1305crates.iolibcrux Panics During Standalone MAC Operations8.7 High- libbiosig project libbiosigAn out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project...6.1 Medium
- exiv2Exiv2: Out-of-bounds read in CrwMap::decode0x08052.7 Low
- exiv2Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow2.7 Low
- freetypeAn integer overflow in the tt_var_load_item_variation_store function of the Freetype library in...5.3 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible out of bounds read due to a missing bounds check. This could lead...4.4 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible out of bounds read due to a missing bounds check. This could lead...4.4 Medium
- fascinatedbox lilyFascinatedBox lily lily_emitter.c clear_storages out-of-bounds4.8 Medium
- fascinatedbox lilyFascinatedBox lily Error Reporting lily_build_error.c patch_line_end out-of-bounds4.8 Medium
- wrenwren-lang wren wren_compiler.c emitOp out-of-bounds4.8 Medium
- google androidIn createRequest of MediaProvider.java, there is a possible way for an app to gain read/write...8.4 High
- vimVim has Heap-based Buffer Overflow and OOB Read in :terminal4.4 Medium
- vimVim has Heap-based Buffer Underflow in Emacs tags parsing5.3 Medium
- vimVim has Heap-based Buffer Overflow in Emacs tags parsing4.4 Medium
- bigcat88 pillow-heif, pillow heif +1 morepillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read5.5 Medium
- vmware workstationVMware Workstation out-of-bound read vulnerability2.7 Low
- red hat pen drive powered by red hat lightspeed, 3scale api management platform 2, enterprise linux 10 +5 more +7 moreRedis: redis: out-of-bounds read via crafted cluster bus packets7.1 High
- berry-lang berryberry-lang berry be_lexer.c scan_string out-of-bounds4.8 Medium
- libvipslibvips extract.c vips_extract_band_build out-of-bounds4.8 Medium
- libvipslibvips unpremultiply.c vips_unpremultiply_build out-of-bounds4.8 Medium
- bluedragonsecurity rldnsrldns Vulnerable to Heap-based Out-of-Bounds Read7.5 High
- m2team nanazipNanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length5.1 Medium
- m2team nanazipNanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength5.1 Medium
- Show moreLoading…