CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- foxit pdf editor, pdf reader +1 moreSecurity vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp6.1 Medium
- foxit pdf editor, pdf reader +1 moreSecurity vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read6.1 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Crash via Malformed PRC 3D Stream6.1 Medium
- hmbrand dbiDBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment9.1 Critical
- gnu wgetGNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing8.7 High
freetypeDebian,freetype2Mageia,freetype-demosRed Hat +2 more +4 moreAn out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit...6.5 Medium- tonyc imagerImager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle7.1 High
- No product listedmrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method...4.4 Medium
- zephyrproject zephyrOut-of-bounds read in Zephyr DNS resolver mDNS suffix check (memcmp past string NUL)3.7 Low
- onnxonnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds5.3 Medium
- linux, linux kernel +1 moreKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 High
- No product listedNet::IP::LPM versions before 1.11 for Perl allow a heap out-of-bounds read via an unbounded prefix length9.1 Critical
- openvpn, debian linux +1 moreA use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote...6.0 Medium
- ardupilot arduplaneardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries...9.1 Critical
- google chromeOut of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who...5.9 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote...8.8 High
- google chromeOut of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote...6.5 Medium
- google chromeOut of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote...9.6 Critical
- pion dtlsPion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message6.3 Medium
- bps html::gumboHTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion9.8 Critical
- linux, linux kernel +1 morerust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES7.1 High
- linux, linux kernel +1 moredrm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()7.1 High
- uvnc ultravncUltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated4.3 Medium
- google chromeInsufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to...8.1 High
- google chromeOut of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker...5.7 Medium
- google chromeOut of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote...8.1 High
- google chromeOut of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...5.3 Medium
- google chromeOut of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote...5.3 Medium
- google chromeOut of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...8.1 High
- zephyrproject zephyrOut-of-bounds read in Bluetooth Controller ISOAL framed RX reassembly leaks adjacent memory into host HCI ISO packets6.5 Medium
- zephyrproject zephyrOut-of-bounds read in Zephyr DNS resolver TXT/SRV record parsing (unvalidated `rdlength`)4.8 Medium
- citrix netscaler gateway, netscaler adc, gateway +1 more +3 moreInsufficient input validation leading to memory overread6.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime6.5 Medium
- citrix netscaler gateway, netscaler adc, gateway +1 more +3 moreInsufficient input validation leading to memory overread8.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and...6.5 Medium
- gtermars javascript::minifier::xsJavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash7.5 High
- eclipse foundation tinydtls, the eclipse foundation eclipse tinydtls +1 moreEclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds...6.9 Medium
- investintech slimpdfreaderInvestintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds5.3 Medium
- strukturag libde265libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.186.9 Medium
- Show moreLoading…