CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)8.3 High
- opensslPossible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()6.2 Medium
- opensslHeap Buffer Over-read in ASN.1 Content Parsing7.5 High
- google chromeOut of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a...7.5 High
- google chromeOut of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker...7.5 High
- google chromeOut of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...4.3 Medium
- google chrome, chromium v8 +1 moreOut of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote...8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: ath5k: do not access array OOB8.3 High
- linux, linux kernel +1 moreclk: microchip: mpfs-ccc: fix out of bounds access during output registration7.1 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`7.3 High
- apache http serverApache HTTP Server: OOB Read in `merge_response_headers` can cause crash6.5 Medium
- 7-zipGHSL-2026-122 7-Zip Ar SYMDEF OOB Read6.5 Medium
- 7-zipGHSL-2026-121 7-Zip UEFI DEPEX OOB Read4.3 Medium
- 7-zipGHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read4.2 Medium
- 7-zipGHSL-2026-119 7-Zip WIM SecurityId OOB read4.3 Medium
- 7-zipGHSL-2026-118: 7-Zip UDF Field OOB Read3.1 Low
- 7-zip7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116)4.3 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes5.5 Medium
- samsung android usb driver, samsung mobile android usb driver for windows +1 moreImproper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0...5.9 Medium
- google chromeInappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a...8.8 High
- google chromeInteger overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...8.8 High
- google chromeInteger overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had...8.3 High
- google chromeOut of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeOut of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker...6.5 Medium
- google chromeOut of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.1 High
- google chromeOut of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeInappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeUninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeBad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute...8.8 High
- google chromeOut of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeType Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeOut of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.1 High
- google chromeOut of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...5.3 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...5.3 Medium
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the...4.0 Medium
- google chromeOut of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeOut of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...8.1 High
- google chromeOut of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.3 High
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.3 High
- google chromeOut of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote...9.6 Critical
- netty netty-incubator-codec-ohttpnetty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access6.8 Medium
- samsung open source rlottieOut-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This...6.1 Medium
- morse micro halowlink 2, morsemicro halowlink 2 firmware +1 moreOut-of-bounds read in morse.ko Vendor IE processing6.8 Medium
- Show moreLoading…