CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- grafana, red hat enterprise linux 10, enterprise linux 8 +1 more +3 moreOpenFeature evaluation API reads input data with no bounds7.5 High
- tp-link systems inc. tl-wr841n v14, tp-link tl-wr841n firmware +1 moreDenial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841N7.1 High
- libpngLIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch647.6 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenfnetlink_osf: validate individual option lengths in fingerprints7.1 High
- squid-cache squidSquid has issues in ICP message handling6.9 Medium
- saloonSaloon has a Fixture Name Path Traversal Vulnerability8.0 High
- b3log siyuanSiYuan has Arbitrary Document Reading within the Publishing Service9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreSquashfs: check metadata block offset is within range7.1 High
- linux, linux kernel +1 morewifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()7.1 High
- linux, linux kernel +1 morecxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()7.1 High
- linux, linux kernel +1 morewifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Use correct version for UAC3 header validation7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()7.1 High
- linux, linux kernel +1 moreaccel/rocket: fix unwinding in error path in rocket_probe7.1 High
- linux, linux kernel +1 moreaccel/amdxdna: Fix out-of-bounds memset in command slot handling7.8 High
- apple xcodeAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...8.4 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...4.3 Medium
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and...6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...6.5 Medium
fido2-libnpmfido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing7.5 High- libvnc libvncserverLibVNCServer UltraZip Encoding Heap Out-of-bounds Read6.9 Medium
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +10 more +12 moreNGINX ngx_http_mp4_module vulnerability8.5 High
- slajerek retrodebuggerOut-of-bounds Read in slajerek RetroDebugger9.1 Critical
- fabiangreffrath woofOut-of-bounds Read in fabiangreffrath woof9.1 Critical
- rizone soft notepad3Notepad3 Bundled Oniguruma compile_string_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Execution9.3 Critical
- tildearrow furnaceOut-of-bounds Read Overflow in tildearrow/furnace8.4 High
- google chromeInappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a...8.8 High
- google chromeOut of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- gstreamer, debian linux, freedesktop gst-plugins-good +6 more +8 moreGstreamer: incomplete fix of cve-2026-19405.1 Medium
- citrix netscaler, netscaler gateway, netscaler adc +2 more +4 moreInsufficient input validation leading to memory overread9.3 Critical
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library6.1 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response7.5 High
- pjsip, pjsip pjproject +1 morePJSIP has an Out-of-bounds Read in SIP multipart parsing6.9 Medium
- google chromeOut of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a...8.8 High
- google chromeOut of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeOut of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed...8.8 High
- wolfsslwc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read1.2 Low
- wolfsslwolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation7.5 High
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 moreLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing7.5 High
- htslibHTSlib CRAM reader has out-of-bounds read due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has out-of-bounds read due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has out-of-bounds reads due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- linux, linux kernel +1 moreapparmor: validate DFA start states are in bounds in unpack_pdb7.1 High
- linux, linux kernel +1 morenvme: fix memory allocation in nvme_pr_read_keys()7.1 High
- Show moreLoading…