CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Kernel Information Disclosure Vulnerability8.2 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreHTTP.sys Information Disclosure Vulnerability6.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows USB Audio Class Driver Information Disclosure Vulnerability6.1 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +10 more +12 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Cloud Files Mini Filter Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Kernel Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Kernel Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows USB Audio Class Driver Information Disclosure Vulnerability4.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Security Feature Bypass Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability7.1 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability6.1 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows USB Print Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows USB Print Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreUniversal Print Management Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows TCP/IP Information Disclosure Vulnerability5.5 Medium
- python pillowPillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)8.3 High
- python pillowPillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images6.5 Medium
- hmbrand dbiDBI versions before 1.651 for Perl do not enforce statement handle consistency with the row9.1 Critical
- fortinet fortiauthenticatorA out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2,...7.0 High
- zephyrproject zephyrUnterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)8.2 High
- citrix secure access client for windowsOut-of-bounds memory read6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)4.8 Medium
- libasslibass: Out-of-bounds read and write in wrap_lines_measure7.3 High
- jonasbn crypt::openssl::x509, crypt\ +1 moreCrypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts9.1 Critical
- blenderBlender 3.0.0 - 5.1.2 Out-of-Bounds Read via crafted .blend SDNA block6.8 Medium
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack8.4 High
- opener project openerOpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when...9.1 Critical
- opener project openerEIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager...9.1 Critical
- freerdpOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName6.5 Medium
- freerdpFreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-235305.1 Medium
- bitwizard mtrOut-of-bound read in mtr5.1 Medium
- apache software foundation iotdb c++ clientApache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server data7.5 High
- osrg gobgpGoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries5.9 Medium
- automattic mongooseCesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing8.7 High
gpacDebianGPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds4.8 Medium- samsung open source escargotOut-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows...6.1 Medium
- samsung open source escargotOut-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows...6.1 Medium
- freerdpFreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments5.4 Medium
- google chromeOut of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote...8.8 High
- denx u-bootU-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c6.9 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability6.1 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability6.1 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- Show moreLoading…