CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moreipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 High
- linux, linux kernel +1 moreRDMA/siw: Reject MPA FPDU length underflow before signed receive math9.8 Critical
- linux, linux kernel +1 moredrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 High
- linux, linux kernel +1 morenetfs: Fix cancellation of a DIO and single read subrequests9.8 Critical
- linux, linux kernel +1 morenetfs: Fix netfs_read_to_pagecache() to pause on subreq failure9.8 Critical
- linux, linux kernel +1 morenetfs: Fix netfs_read_folio() to wait on writeback7.8 High
- linux, linux kernel +1 moreblock: don't overwrite bip_vcnt in bio_integrity_copy_user()7.8 High
- linux, linux kernel +1 morecgroup/rstat: validate cpu before css_rstat_cpu() access7.8 High
- linux, linux kernel +1 morewifi: mac80211: bounds-check link_id in ieee80211_ml_epcs8.8 High
- linux, linux kernel +1 morenet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 Critical
- linux, linux kernel +1 moresecurity/keys: fix missed RCU read section on lookup7.8 High
- linux, linux kernel +1 moreInput: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size7.1 High
- linux, linux kernel +1 morenet: hsr: fix potential OOB access in supervision frame handling9.8 Critical
- linux, linux kernel +1 moretunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 Critical
- linux, linux kernel +1 moreethtool: eeprom: add more safeties to EEPROM Netlink fallback7.8 High
- linux, linux kernel +1 moreauxdisplay: line-display: fix OOB read on zero-length message_store()7.1 High
- linux, linux kernel +1 moreBluetooth: HIDP: fix missing length checks in hidp_input_report()8.8 High
- linux, linux kernel +1 moreInput: xpad - fix out-of-bounds access for Share button7.1 High
- linux, linux kernel +1 moreKVM: SEV: Check PSC request indices against the actual size of the buffer9.3 Critical
- linux, linux kernel +1 moreiio: gyro: itg3200: fix i2c read into the wrong stack location7.1 High
- linux, linux kernel +1 moreipv6: validate extension header length before copying to cmsg7.1 High
- linux, linux kernel +1 morenfc: hci: fix out-of-bounds read in HCP header parsing8.8 High
- linux, linux kernel +1 morexfrm: esp: restore combined single-frag length gate9.8 Critical
- linux, linux kernel +1 moreksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops8.1 High
- linux, linux kernel +1 moreusb: usbtmc: check URB actual_length for interrupt-IN notifications7.1 High
- linux, linux kernel +1 moreUSB: serial: belkin_sa: validate interrupt status length7.1 High
- linux, linux kernel +1 moreUSB: serial: cypress_m8: validate interrupt packet headers7.1 High
- linux, linux kernel +1 moreASoC: rsnd: Fix potential out-of-bounds access of component_dais[]7.1 High
- linux, linux kernel +1 moref2fs: validate orphan inode entry count8.4 High
- linux, linux kernel +1 moref2fs: bound i_inline_xattr_size for non-inline-xattr inodes8.4 High
- linux, linux kernel +1 moref2fs: validate ACL entry sizes in f2fs_acl_from_disk()7.8 High
- linux, linux kernel +1 moreKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level8.8 High
- linux, linux kernel +1 moresched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path7.8 High
- linux, linux kernel +1 moreocfs2: reject oversized group bitmap descriptors8.8 High
- linux, linux kernel +1 morefbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()7.1 High
- linux, linux kernel +1 moreksmbd: fix out-of-bounds read in smb_check_perm_dacl()8.1 High
- openidc mod auth openidcmod_auth_openidc has out-of-bounds read and write in state cookie parsing7.5 High
- linux, linux kernel +1 moredrm/amdgpu/vce: Prevent partial address patches8.8 High
- google chromeOut of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote...8.8 High
- oisf suricataSuricata smtp/mime: heap out-of-bounds read quoted-printable decoder8.2 High
- liftoff-sr cipsterliftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-bounds6.9 Medium
- h2oh2o is vulnerable to heap overrun5.9 Medium
- toddr yaml::syckYAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len7.7 High
- toddr yaml::syckYAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec9.1 Critical
- automationdirect productivity suiteAutomationDirect Productivity Suite Out-of-bounds Read5.2 Medium
- automationdirect productivity suiteAutomationDirect Productivity Suite Out-of-bounds Read6.9 Medium
- nimiq core-rs-albatrossNimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof3.7 Low
- automationdirect productivity suiteAutomationDirect Productivity Suite Out-of-bounds Read6.9 Medium
- rizinorg rz-libdemanglerz-libdemangle: Out of bound read in rust demangler5.5 Medium
- codechild xml::bareXML::Bare versions through 0.53 for Perl have an unbounded character lookahead9.1 Critical
- Show moreLoading…