CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +29 more +31 moreBuffer Over-read in DSP Service6.1 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +255 more +257 moreBuffer Over-read in WLAN Firmware6.5 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +243 more +245 moreBuffer Over-read in WLAN HAL6.5 Medium
- apache http serverApache HTTP Server: Off-by-one OOB reads in AJP getter functions5.3 Medium
- apache http serverApache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)5.3 Medium
- ollamaOllama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers8.8 High
- osrg gobgposrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds6.9 Medium
- mediatek mt6768 firmware, mt6789 firmware, mt6877 firmware +15 more +17 moreIn geniezone, there is a possible escalation of privilege due to a missing bounds check. This...6.7 Medium
- osrg gobgpGoBGP has an out-of-bounds read in the ParseIP6Extended function7.5 High
assimpDebianAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...6.5 Medium- mikrotik routerosMikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds6.9 Medium
- oracle linuxAn unprivileged attacker can craft a user-space process with a malicious ELF binary containing an...4.4 Medium
- linux, linux kernel +1 moreHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 High
- linux, linux kernel +1 moreHID: core: Mitigate potential OOB by removing bogus memset()8.8 High
- linux, linux kernel +1 morempls: add seqcount to protect the platform_label{,s} pair7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: ignore explicit helper on new expectations7.3 High
- linux, linux kernel +1 moreio_uring/rsrc: reject zero-length fixed buffer import7.1 High
- linux, linux kernel +1 morehwmon: (tps53679) Fix array access with zero-length block read7.1 High
- linux, linux kernel +1 moreperf/x86: Fix potential bad container_of in intel_pmu_hw_config7.8 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()8.1 High
- linux, linux kernel +1 moreALSA: caiaq: fix stack out-of-bounds read in init_card7.1 High
- linux, linux kernel +1 moreio_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()7.1 High
- linux, linux kernel +1 moreBluetooth: hci_event: move wake reason storage into validated event handlers8.1 High
- linux, linux kernel +1 morevt: discard stale unicode buffer on alt screen exit after resize7.8 High
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 moresmb: client: validate the whole DACL before rewriting it in cifsacl8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 High
imageproccrates.ioimageproc: integer overflow in kernel size check leads to out-of-bounds read6.9 Medium- opencascade open cascade technologyOpen CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP...5.5 Medium
- opencascade open cascade technologyA stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in...5.5 Medium
- opencascade open cascade technologyAn out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open...5.5 Medium
- opencascade open cascade technologyAn issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open...7.5 High
- opencascade open cascade technologyA heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in...7.1 High
- opencascade open cascade technologyTwo heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE...7.1 High
- No product listedopenxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out...7.1 High
- frrouting frr, frrouting +1 moreFRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions6.0 Medium
- absolute secure accessArbitrary read/write vulnerability in Windows clients prior to 14.508.5 High
- absolute secure accessOut of bounds read in Secure Access MacOS clients prior to 14.502.3 Low
- asr kestrel, asrmicro asr1803 firmware +1 moreOut-of-bounds read in ulp7.4 High
- amazon freertos-plus-tcpOut-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP6.0 Medium
- netskope clientEndpoint DLP Driver Out-of-Bounds Read6.8 Medium
- eximIn Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large...3.7 Low
- google chromeOut of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote...8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreInformation disclosure due to incorrect boundary conditions in the Audio/Video component7.5 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: C++ JSON OOB read6.5 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Range crash in skip()8.2 High
- artifex mupdfArtifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds4.8 Medium
gpacDebianGPAC MP4Box box_code_base.c elng_box_read out-of-bounds4.8 Medium- Show moreLoading…