CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- strukturag libde265libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry6.9 Medium
- freebsdMultiple vulnerabilities in the sound(4) mmap path7.8 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash5.0 Medium
- linux, linux kernel +1 moref2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()7.1 High
- dragonflydb dragonflyDragonfly: RESTORE operations may crash the server7.5 High
- ollamaThere exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine7.5 High
- wolfsslOut-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation6.3 Medium
- rtklibRTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri4.8 Medium
- horner automation cscapeOut-of-bounds read in Horner Automation Cscape8.4 High
- wolfsslHeap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData6.3 Medium
- vimVim: Out-of-bounds Read in Text Property Count5.3 Medium
- vimVim: Out-of-bounds Read with libsodium-encrypted Files5.5 Medium
- vimVim: Out-of-bounds Read with Text Properties6.8 Medium
- silabs emberznetSimple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.27.1 High
- silabs emberznetDoor Lock GetUserType invalid table index in EmberZNet v9.0.27.1 High
- silabs emberznetGroups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.27.1 High
- silabs emberznetOTA server raw parser missing per-field bounds validation in EmberZNet v9.0.27.1 High
- silabs emberznetGlobal ZCL command parser missing minimum-length validation in EmberZNet v9.0.27.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: MGMT: validate advertising TLV before type checks7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: RFCOMM: validate skb length in MCC handlers8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: bnep: reject short frames before parsing7.1 High
- linux, linux kernel +1 moresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Critical
- linux, linux kernel +1 morenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: fix uninit-value in __sctp_rcv_asconf_lookup()9.1 Critical
- linux, linux kernel +1 moresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: guard timestamp cmsgs to real error queue skbs7.1 High
- linux, linux kernel +1 moreaccel/ivpu: Add bounds checks for firmware log indices7.1 High
- linux, linux kernel +1 moreRDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc7.1 High
- linux, linux kernel +1 moreRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Critical
- linux, linux kernel +1 morestaging: rtl8723bs: fix buffer over-read in rtw_update_protection7.1 High
- linux, linux kernel +1 moreaccel/ethosu: fix IFM region index out-of-bounds in command stream parser7.8 High
- linux, linux kernel +1 morerxrpc: Fix the ACK parser to extract the SACK table for parsing9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Bound root directory content to block size7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Validate XDomain request packet size before type cast8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Limit XDomain response copy to actual frame size7.1 High
- linux, linux kernel +1 moredrm/amd/display: Bound VBIOS record-chain walk loops7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: require Ethernet MAC header before using eth_hdr()9.4 Critical
- google chromeOut of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197...8.8 High
- linux, linux kernel +1 morebpf: Fix same-register dst/src OOB read and pointer leak in sock_ops7.8 High
- linux, linux kernel +1 morebpf: Fix OOB in pcpu_init_value7.1 High
- linux, linux kernel +1 moresoc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables7.1 High
- linux, linux kernel +1 moreima_fs: Correctly create securityfs files for unsupported hash algos5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nfnetlink_osf: fix out-of-bounds read on option matching9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Critical
- linux, linux kernel +1 moreKVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic8.8 High
- linux, linux kernel +1 moresmb/client: fix possible infinite loop and oob read in symlink_data()8.1 High
- linux, linux kernel +1 morelibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 Critical
- linux, linux kernel +1 morelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morelibceph: Fix potential out-of-bounds access in crush_decode()9.8 Critical
- Show moreLoading…