CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb/client: fix out-of-bounds read in symlink_data()9.1 Critical
- linux, linux kernel +1 moresmb/client: fix out-of-bounds read in smb2_compound_op()9.1 Critical
- linux, linux kernel +1 moreBluetooth: btmtk: validate WMT event SKB length before struct access7.1 High
- linux, linux kernel +1 moreBluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt8.1 High
- linux, linux kernel +1 moreRDMA/rxe: Reject unknown opcodes before ICRC processing7.5 High
- linux, linux kernel +1 moredm-verity-fec: fix reading parity bytes split across blocks (take 3)7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreisofs: validate block number from NFS file handle in isofs_export_iget7.5 High
- linux, linux kernel +1 morelibceph: Fix slab-out-of-bounds access in auth message processing9.1 Critical
- linux, linux kernel +1 moreRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: denial of service via malformed authorization header5.3 Medium
- struktur libheiflibheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow7.1 High
- canonical ubuntu linuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling7.8 High
- canonical ubuntu linuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling5.5 Medium
- struktur libheiflibheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access6.1 Medium
- struktur libheiflibheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data26.8 Medium
- libusblibusb < 1.0.30 NULL Pointer Dereference in parse_interface()6.9 Medium
- libusblibusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()5.1 Medium
- linux, linux kernel +1 moreext4: fix bounds check in check_xattrs() to prevent out-of-bounds access7.1 High
- linux, linux kernel +1 moreerofs: fix the out-of-bounds nameoff handling for trailing dirents7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremd/raid5: validate payload size before accessing journal metadata7.1 High
- linux, linux kernel +1 moremm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreibmasm: fix heap over-read in ibmasm_send_i2o_message()7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv4: icmp: validate reply type before using icmp_pointers8.2 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creation7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremisc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()7.1 High
- linux, linux kernel +1 moremm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp7.1 High
- linux, linux kernel +1 moreibmasm: fix OOB reads in command_file_write due to missing size checks7.1 High
- linux, linux kernel +1 morercu: Fix rcu_read_unlock() deadloop due to softirq7.1 High
- linux, linux kernel +1 moreerofs: fix inline data read failure for ztailpacking pclusters7.1 High
- linux, linux kernel +1 morefs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot7.8 High
- linux, linux kernel +1 morebpf: Fix memory access flags in helper prototypes7.1 High
- linux, linux kernel +1 moreapparmor: Fix & Optimize table creation from possibly unaligned memory7.1 High
- linux, linux kernel +1 moredrm/amdkfd: Fix watch_id bounds checking in debug address watch v27.8 High
- linux, linux kernel +1 moreRDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send7.1 High
- linux, linux kernel +1 moreefi: Fix reservation of unaccepted memory table7.1 High
- linux, linux kernel +1 moreima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()7.1 High
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- nvidia geforce, gpu display driver, guest driver +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of...7.1 High
- checkpoint quantum security gatewayVPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP8.1 High
- gnu libredwgGNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds4.8 Medium
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP...7.5 High
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9...6.5 Medium
fastnetmonDebianFastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the...6.5 Medium- gnu libredwgGNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds4.8 Medium
- struktur libheiflibheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count5.1 Medium
- struktur libheiflibheif allows Out-of-bounds vector access leading to invalid dereference (DoS)6.5 Medium
- imagemagickImageMagick: Heap Buffer Over-Read in distributed pixel cache server5.7 Medium
- linux, linux kernel +1 morenet: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler8.8 High
- netatalkEA header parsing heap over-read3.7 Low
- Show moreLoading…