CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- neutrinolabs xrdpxrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers7.7 High
- opencryptokiopenCryptoki: Memory safety vulnerabilities in BER/DER decoders in asn1.c6.8 Medium
- ascensio onlyoffice documentserverONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing...5.0 Medium
- google chromeOut of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker...7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: application crashes or information disclosure via crafted icns image files5.0 Medium
- imagemagickImageMagick - Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact4.8 Medium
- imagemagickImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing4.8 Medium
- imagemagickImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter4.8 Medium
- adobe framemakerAdobe Framemaker | Out-of-bounds Read (CWE-125)7.8 High
- gomarkdown markdowngithub.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer7.5 High
- saitoha libsixellibsixel: Integer overflow leads to Out-of-bounds Read in img2sixel7.1 High
- adobe incopyInCopy | Out-of-bounds Read (CWE-125)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Out-of-bounds Read (CWE-125)7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreWindows Storage Spaces Controller Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows GDI Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Encrypted File System (EFS) Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc for mac 2021 +2 more +4 moreMicrosoft Word Information Disclosure Vulnerability6.1 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreHTTP.sys Denial of Service Vulnerability7.5 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Information Disclosure Vulnerability7.1 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows GDI Information Disclosure Vulnerability5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)7.8 High
- python software foundation cpythonOut-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreXorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access7.8 High
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.6.1 Medium
- jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 morejq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers6.9 Medium
- jqlang jqjq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure6.1 Medium
- imagemagickImageMagick has an Out-of-Bounds read via -sample operation5.5 Medium
- nimiq core-rs-albatross, proof-of-stake +1 moreNimiq: Remote crash via off-by-one signer bounds check in proposal buffer7.5 High
- samsung escargotOut-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure...6.5 Medium
- samsung escargotOut-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure...6.7 Medium
- ffmpegAn out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1...7.5 High
- linux, linux kernel +1 morebpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR7.8 High
- wolfsslwolfSSL heap OOB read in PKCS7 SignedData streaming2.3 Low
- wolfsslOOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS6.3 Medium
- mtrojnar osslsigncodeosslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash Calculation5.5 Medium
- mtrojnar osslsigncodeosslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read5.5 Medium
- orthanc dicom server, orthanc-server orthanc +1 moreOut-of-Bounds Read in DicomStreamReader7.5 High
- orthanc dicom server, orthanc-server orthanc +1 moreOut-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)9.1 Critical
- orthanc dicom server, orthanc-server orthanc +1 moreOut-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)7.1 High
- bytecodealliance wasmtimeWasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access9.0 Critical
- bytecodealliance wasmtime, red hat connectivity link 1, enterprise linux 10 +2 moreWasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift9.0 Critical
- bytecodealliance wasmtimeWasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding6.9 Medium
- sleuthkit the sleuth kit, sleuthkit +1 moreSleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read4.8 Medium
- sleuthkit the sleuth kit, sleuthkit +1 moreSleuth Kit APFS Keybag Parser Out-of-Bounds Read4.8 Medium
- google chromeOut of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.1 High
- google chromeInsufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote...8.1 High
- google chromeOut of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote...5.3 Medium
- google chromeOut of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote...8.8 High
- Show moreLoading…