CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreCVE-2026-51727.3 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-48915.3 Medium
- shlomif xml::libxml, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreXML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences7.5 High
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGlobal buffer over-read in mb_convert_encoding() with attacker-supplied encoding6.3 Medium
- osgeo gdalOSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWSDfldsrch heap-based overflow4.8 Medium
- open5gsOpen5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-bounds6.9 Medium
- linux, linux kernel +1 morenetfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()7.1 High
- linux, linux kernel +1 morenetfilter: x_tables: guard option walkers against 1-byte tail reads8.2 High
- linux, linux kernel +1 morenetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()7.1 High
- linux, linux kernel +1 morenvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set7.1 High
- linux, linux kernel +1 moreusb: class: cdc-wdm: fix reordering issue in read code path7.1 High
- linux, linux kernel +1 morelibceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()9.1 Critical
- linux, linux kernel +1 morelibceph: prevent potential out-of-bounds reads in process_message_header()9.1 Critical
- linux, linux kernel +1 morestaging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie7.1 High
- linux, linux kernel +1 morehwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: require a full NFS mode SID before reading mode bits7.6 High
- asus system control interfaceAn Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows...6.8 Medium
- osgeo gdalOSGeo gdal GDapi.c GDfieldinfo out-of-bounds4.8 Medium
- osgeo gdalOSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds4.8 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.28.1 High
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSigned integer overflow in metaphone()6.3 Medium
- phpOut-of-bounds read in urldecode() on NetBSD6.3 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion8.8 High
- google chromeOut of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...8.8 High
- google chromeOut of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...4.3 Medium
- google chromeOut of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.1 High
- google chromeOut of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote...5.4 Medium
- google chromeOut of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...3.1 Low
- google chromeOut of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...4.3 Medium
- google chromeOut of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...4.3 Medium
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeOut of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote...8.8 High
- linux, linux kernel +1 moremailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()7.1 High
- linux, linux kernel +1 moredrm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise7.1 High
- linux, linux kernel +1 moremailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()8.4 High
- linux, linux kernel +1 moremedia: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()7.8 High
- linux, linux kernel +1 morentb: ntb_hw_switchtec: Fix array-index-out-of-bounds access7.1 High
- linux, linux kernel +1 morenetfilter: nf_conntrack_h323: fix OOB read in decode_choice()8.2 High
- linux, linux kernel +1 morewifi: rtw89: pci: validate sequence number of TX release report7.5 High
- linux, linux kernel +1 morenetconsole: avoid OOB reads, msg is not nul-terminated9.1 Critical
- linux, linux kernel +1 morenetfilter: xt_tcpmss: check remaining length before reading optlen8.2 High
- linux, linux kernel +1 morentb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut7.1 High
- linux, linux kernel, red hat enterprise linux 10 +24 more +26 morefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath8.8 High
- linux, linux kernel +1 morenet: ioam6: fix OOB and missing lock9.1 Critical
- owasp modsecuritylibModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings8.2 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moredcache: Limit the minimal number of bucket to two9.1 Critical
- linux, linux kernel +1 morebpf: Reset register ID for BPF_END value tracking7.8 High
- eclipse openj9, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moreRed Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update8.7 High
- linuxcontainers incusIncus out-of-bounds panic in snapshot metadata handling allows denial of service7.1 High
- Show moreLoading…