CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- codechild html::bareHTML::Bare versions through 0.04 for Perl have an unbounded character lookahead9.1 Critical
- taosdata tdengineTDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken5.4 Medium
- taosdata tdengineTDengine: Unauthenticated Remote Denial of Service via Out-of-Bounds Read in transDecompressMsg7.5 High
- zephyrproject zephyrOut-of-bounds write in ADIN2111/ADIN1110 OA SPI Ethernet RX frame reassembly8.3 High
- f5 nginx plus, nginx gateway fabric, nginx ingress controller +1 more +3 moreNGINX Plus ngx_stream_mqtt_filter_module vulnerability6.3 Medium
- tuxera ntfs-3gCVE-2026-56136 affecting package ntfs-3g for versions less than 2022.10.3-44.7 Medium
- tuxera ntfs-3gCVE-2026-46571 affecting package ntfs-3g for versions less than 2022.10.3-55.5 Medium
- imagemagickImageMagick before 7.1.2-26 Information Disclosure via identify2.1 Low
- asus business manager, system control interface, system control interface v3 +1 more +3 moreOut-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS...5.6 Medium
- busyboxA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to...5.1 Medium
- adobe media encoderMedia Encoder | Out-of-bounds Read (CWE-125)5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string6.5 Medium
- open5gsPre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler8.6 High
- red hat enterprise linux 10Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption5.9 Medium
- adobe auditionAudition | Out-of-bounds Read (CWE-125)5.5 Medium
- go standard library net, golang.org/x/net golang.org/x/net/dns/dnsmessage +1 moreParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability7.1 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows USB Audio Class Driver Information Disclosure Vulnerability6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Print Spooler Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Secure Channel Information Disclosure Vulnerability8.1 High
- microsoft office 365 for mac, office for android, office ltsc for mac 2021 +26 more +28 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability6.1 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability7.1 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +12 more +14 moreMicrosoft Excel Information Disclosure Vulnerability6.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +15 more +17 moreMicrosoft Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +14 more +16 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +10 more +12 moreActive Directory Denial of Service Vulnerability7.1 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Win32k Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Network Policy Server SNMP Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreCode Integrity DLL (ci.dll) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Network Policy Server SNMP Information Disclosure Vulnerability7.5 High
- Show moreLoading…