CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moreiommu/vt-d: Fix oops due to out of scope access7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nf_log: validate MAC header was set before dumping it7.1 High
- linux, linux kernel +1 morenetfilter: ebtables: fix OOB read in compat_mtw_from_user7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: diag: reject stale associations in dump_one path7.1 High
- linux, linux kernel +1 morenetfilter: ip6t_hbh: reject oversized option lists7.1 High
- freedesktop.org libslirplibslirp TCP URG OOB Read Information Leak6.5 Medium
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser4.4 Medium
- gstreamer, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser4.3 Medium
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreDnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation5.3 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +8 more +10 moreOpenssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination3.7 Low
- zephyrproject zephyrOut-of-bounds access in Bluetooth ISO receive (`bt_iso_recv`) due to missing SDU-header length validation7.1 High
- zephyrproject zephyrOut-of-bounds read in Zephyr ext2 directory entry traversal from a crafted filesystem image4.9 Medium
- messagepack, messagepack-csharp +1 moreMessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows8.2 High
- jonasbn crypt::openssl::pkcs12Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path9.1 Critical
- ohler55 ojOj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input7.5 High
- ohler55 ojOj: intern.c form_attr has an uninitialized stack read5.3 Medium
- nokogiriNokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`6.3 Medium
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id7.1 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morebpf: Free reuseport cBPF prog after RCU grace period.7.8 High
- ni grpc-device, instrumentstudio, grpc device server +2 moreOut-of-bounds read vulnerability in the NI grpc-device streaming API8.7 High
- freerdpFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch7.2 High
- microsoft heif image extensionMicrosoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because...9.1 Critical
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c8.3 High
- openbsd, netbsd src +1 moreOpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input6.9 Medium
- sonos tracttract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load6.1 Medium
- rui314 8ccOut‑of‑Bounds Read in 8cc5.1 Medium
- black lantern security bbotArbitrary File Write in postman_download module6.5 Medium
- rti connext microOut-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.8.8 High
- rti connext professionalOut-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.9.2 Critical
- f5 nginx open source, nginx plus, dos +4 more +6 moreNGINX ngx_http_charset_module vulnerability6.3 Medium
- google chromeOut of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a...5.5 Medium
- leejet stable-diffusion.cppstable-diffusion.cpp: Out-of-bounds reads in PyTorch checkpoint pickle opcode parsing5.5 Medium
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Out-of-bounds Read (CWE-125)5.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 1527.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 1527.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to incorrect boundary conditions in the Graphics: WebGPU component4.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 1525.4 Medium
- cato networks socket, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreSocket versions before 2.041 for Perl have an out-of-bounds heap read9.1 Critical
cryptographyPyPIVulnerable OpenSSL included in cryptography wheels7.5 High- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreGstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreGstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +5 more +7 moreGstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder7.1 High
- driftregion iso14229iso14229 Integer Underflow and Out-of-Bounds Read in Handle_0x27_SecurityAccess()7.8 High
- liambindle mqtt-cMQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt_unpack_publish_response()7.8 High
- Show moreLoading…