CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- kamailioKamailio Auth: Processing Vulnerability For Additional Authenticated User Identity Checks4.4 Medium
- opensslOut-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support7.5 High
- ni labviewOut-of-Bounds Read in mgcore_SH_25_3!aligned_free()8.5 High
- ni labviewOut-of-Bounds Read in sentry_transaction_context_set_operation()8.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.29.8 Critical
- zlmediakitZLMediaKit VP9 RTP Parser Out-of-Bounds Read7.5 High
- trabucayre openfpgaloaderopenFPGALoader has a heap buffer overflow in POFParser::parseSection() via crafted .pof file7.1 High
- trabucayre openfpgaloaderopenFPGALoader has a heap buffer overflow in BitParser::parseHeader() via crafted .bit file7.1 High
- dafoster rdiscountDiscount has an Out-of-bounds Read in rdiscount5.9 Medium
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +9 more +11 moreOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write8.6 High
- xiph theora, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibtheora: libtheora: denial of service or information disclosure via malformed avi file processing5.6 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: conntrack: add missing netlink policy validations7.1 High
- linux, linux kernel +1 moremedia: dvb-net: fix OOB access in ULE extension header tables9.8 Critical
- libsdl sdl imageSDL_image has a heap buffer overflow READ via unchecked colormap index in XCF loader7.1 High
- mesop-dev mesopMesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service7.5 High
- linux, linux kernel +1 morebnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler7.1 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access8.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case8.2 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()9.1 Critical
- electronElectron: Out-of-bounds read in second-instance IPC on macOS and Linux5.3 Medium
- apple swift-crypto, macos +1 moreSwift Crypto: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length7.5 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.3 Medium
- emqx nanomqnanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read4.9 Medium
- signalk signal k server, signalk-server +1 moresignalk-server: Arbitrary Prototype Read via `from` Field Bypass2.1 Low
- librawLibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-bounds6.9 Medium
- trustedfirmware mbed tlsAn issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in...7.5 High
- nothings stb, stb truetype.h +1 moreNothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds5.3 Medium
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM....8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile...8.4 High
- nothings stb, stb truetype.h +1 moreNothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds5.3 Medium
- linux, linux kernel +1 moreapparmor: fix missing bounds check on DEFAULT table in verify_dfa()7.8 High
- linux, linux kernel +1 moreapparmor: fix side-effect bug in match_char() macro usage7.8 High
- google chromeOut of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote...8.8 High
- google chromeOut of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote...8.1 High
- rti connext professionalBuffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.6.3 Medium
- color iccdeviccDEV: HBO in icAnsiToUtf8()6.2 Medium
- color iccdeviccDEV: HBO in CIccApplyCmmSearch::costFunc()6.2 Medium
- teluu pjsip, pjsip pjproject +1 morePJSIP: Heap OOB read in VPX unpacketizer6.9 Medium
- freerdpFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read5.9 Medium
- freerdpFreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read7.1 High
- botan project botanBotan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field8.2 High
- emqx nanomqnanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket6.5 Medium
- openscOpenSC: Out of Bounds vulnerability3.9 Low
- bluekitchen gmbh btstackBlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior2.1 Low
- bluekitchen gmbh btstackBlueKitchen BTstack < 1.8.1 AVRCP Controller GET_PLAYER_APPLICATION_SETTING_*_TEXT Handlers OOB Read2.1 Low
- bluekitchen gmbh btstackBlueKitchen BTstack < 1.8.1 AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_* Handlers OOB Read2.1 Low
openccnpmOpenCC has an Out-of-bounds read when processing truncated UTF-8 input6.5 Medium- wazuhWazuh authd service (os_auth) Heap-based Buffer Overflow5.3 Medium
- wazuhHeap buffer overflow in wazuh-authd5.3 Medium
- Show moreLoading…