CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: linearize skb before parsing ND options9.1 Critical
- linux, linux kernel +1 morenet/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()7.1 High
- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser8.7 High
- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder8.7 High
- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser8.7 High
- teluu pjsip, pjsip pjproject +1 morePJSIP: SIP Multipart CID URI Length Underflow6.7 Medium
- openprinting cupsOpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users4.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morerxrpc: Fix RxGK token loading to check bounds7.8 High
- linux, linux kernel +1 morerxrpc: fix RESPONSE authenticator parser OOB read9.1 Critical
- linux, linux kernel +1 morerxrpc: Fix buffer overread in rxgk_do_verify_authenticator()8.2 High
- linux, linux kernel +1 moresmb: client: fix off-by-8 bounds check in check_wsl_eas()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB reads parsing symlink error response8.1 High
- linux, linux kernel +1 morecan: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 High
- linux, linux kernel +1 moreLoongArch: KVM: Handle the case that EIOINTC's coremap is empty7.3 High
- linux, linux kernel +1 mores390/mm: Add missing secure storage access fixups for donated memory7.1 High
- linux, linux kernel +1 moreLoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust8.8 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure8.7 High
- sbabic swupdateSWUpdate Integer Underflow in Multipart Upload Parser8.2 High
- google chromeOut of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote...9.6 Critical
- openvpnA race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote...6.1 Medium
- linux, linux kernel +1 moreperf: Make sure to use pmu_ctx->pmu for groups7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req8.1 High
- linux, linux kernel +1 moreio_uring/fdinfo: fix OOB read in SQE_MIXED wrap check7.1 High
- linux, linux kernel +1 morevirt: tdx-guest: Fix handling of host controlled 'quote' buffer length7.1 High
- linux, linux kernel +1 morescsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()8.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreext4: validate p_idx bounds in ext4_ext_correct_indexes7.8 High
- linux, linux kernel +1 moredmaengine: idxd: Fix possible invalid memory access after FLR7.8 High
- linux, linux kernel +1 morenetfs: Fix read abandonment during retry8.8 High
- powerdns dnsdistOut-of-bounds read in cache inspection via Lua4.8 Medium
- powerdns dnsdistOut-of-bounds read in service discovery3.1 Low
- rustls webpkirustls-webpki before 0.103.13 Panic via empty BIT STRING8.7 High
- linux, linux kernel +1 moreksmbd: fix potencial OOB in get_file_all_info() for compound requests8.8 High
- nvidia cuda-qNVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could...8.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing5.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 1507.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 1507.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 150 and Thunderbird 1507.5 High
- wolfsshPotential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize2.3 Low
- linux, linux kernel +1 moreX.509: Fix out-of-bounds access when parsing extensions7.1 High
- rust-opensslrust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length1.7 Low
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response6.1 Medium
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c5.2 Medium
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.c5.2 Medium
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.c5.2 Medium
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c6.1 Medium
- miniupnp project miniupnpdminiupnpd Integer Underflow SOAPAction Header Parsing7.1 High
- libcoaplibcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling8.8 High
- neutrinolabs xrdpxrdp: Pre-authentication out-of-bounds reads in channel parsers8.7 High
- Show moreLoading…