CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()6.5 Medium
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Heap Out-of-Bounds Read via publickey subsystem7.7 High
- libssh2libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation8.7 High
- yawkat lz4-javayawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)6.5 Medium
- libeventLibevent: decode_tag_internal() can lead to out-of-bounds read8.7 High
- onnxONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape3.3 Low
- linux, linux kernel +1 morewifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers8.8 High
- linux, linux kernel +1 moreKVM: x86: hyper-v: Bound the bank index when querying sparse banks8.4 High
- linux, linux kernel +1 moreASoC: codecs: simple-mux: Fix enum control bounds check7.1 High
- linux, linux kernel +1 moreInput: elan_i2c - validate firmware size before use7.1 High
- linux, linux kernel +1 morewifi: mac80211: consume only present negotiated TTLM maps8.1 High
- linux, linux kernel +1 morephy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config7.1 High
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)8.7 High
- fluidsynthFluidSynth: Heap-based buffer overrun for DLS samples8.0 High
- fluidsynthFluidSynth: Heap Buffer Overflow in MIDI Player7.8 High
- gnu coreutilsOut‑of‑bounds Read in GNU coreutils4.6 Medium
- mz automation lib60870Out-of-bounds Read in MZ Automation lib608708.8 High
- linuxfoundation torchvision, pytorch vision +1 morePyTorch torchvision GIF Decoder Out-of-bounds Heap Read7.1 High
- gnome gdk-pixbuf, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGdk-pixbuf: out-of-bounds read in ico parser5.3 Medium
- apple swift-nio-ssl, swiftnio ssl +1 moreNIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by…7.7 High
- mongodb server, mongodb, mongodb, inc. mongodb server +2 moreOut-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data7.1 High
- ffmpegFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c7.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreSbc: sbc: heap out-of-bounds read via crafted sbc audio frame4.3 Medium
- google chromeOut of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed...9.6 Critical
- zephyrproject zephyrOut-of-bounds access in Zephyr BR/EDR L2CAP configuration request handling via `uint16_t` length underflow7.6 High
- egor data::disjointset::sharedData::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find9.8 Critical
- egor data::spatialhash::sharedData::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot7.8 High
- egor data::intern::sharedData::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_find9.1 Critical
- egor data::roaringbitmap::sharedData::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalidated container offset and cardinality in rb_contains_locked6.3 Medium
- egor data::hashmap::sharedData::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm_str_copy9.1 Critical
- egor data::radixtree::sharedData::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_locked9.1 Critical
- egor data::sortedset::sharedData::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths9.1 Critical
- egor data::reqrep::sharedData::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_locked9.1 Critical
- gnome libsoup, red hat enterprise linux 10, redhat enterprise linux +2 moreLibsoup: heap out-of-bounds read in libsoup due to integer truncation4.2 Medium
- eclipse omrEclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zero5.7 Medium
- qtOut-of-bounds read in QTextCodec::codecForName() in Qt6.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: information disclosure via short gssapi curve25519 public key3.7 Low
- apache foryApache Fory, Apache Fory: Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserialization9.1 Critical
- neutrinolabs xrdpxrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)5.3 Medium
- neutrinolabs xrdpxrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification5.3 Medium
- neutrinolabs xrdpxrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)6.5 Medium
- nanomqNanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read6.5 Medium
- linux, linux kernel +1 morei2c: stub: Reject I2C block transfers with invalid length7.8 High
- hdfgroup hdf5Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c5.9 Medium
- red hat advanced cluster security 4, quay 3 +1 moreClaircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser4.3 Medium
- libgit2libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data7.5 High
- linux, linux kernel +1 moreiommu/amd: Remove latent out-of-bounds access in IOMMU debugfs7.1 High
- linux, linux kernel +1 moreALSA: asihpi: Fix potential OOB array access at reading cache7.8 High
- linux, linux kernel +1 moreBluetooth: MGMT: validate Add Extended Advertising Data length7.3 High
- linux, linux kernel +1 morenet: ifb: report ethtool stats over num_tx_queues7.1 High
- Show moreLoading…