CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linuxceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 Critical
- linuxksmbd: validate num_subauth when copying ACE in set_ntacl_dacl8.1 High
- linuxksmbd: bound DACL dedup walk to copied ACEs8.8 High
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low...6.2 Medium
perlAzure Linux,perl-Attribute-HandlersRed Hat,perl-AutoLoaderRed Hat +98 more +100 morePerl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch5.7 Medium- linuxlibceph: fix two unsafe bare decodes in decode_lockers()9.8 Critical
- zephyrproject zephyrMissing negative-offset/overflow check in SF32LB MPI QSPI NOR flash driver allows out-of-bounds read and write6.6 Medium
- sonicwall global vpn clientSonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds...5.5 Medium
- gopacketgopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser7.5 High
- tonyc imagerImager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags7.5 High
- cisco secure endpointClamAV Mach-O File Format Processing Memory Corruption Vulnerability7.5 High
- cisco secure endpointClamAV PDF File Format Processing Memory Corruption Vulnerability7.5 High
- ocaml mirage-crypto-ecAn issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC...4.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Buffer Overflow in 'editini' function8.9 High
- apache foryApache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path9.1 Critical
- uhop node-re2node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript5.1 Medium
- contiki-ngContiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validation7.1 High
- contiki-ngContiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read8.7 High
- timescale timescaledbTimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index7.1 High
- timescale timescaledbTimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator7.2 High
- timescale timescaledbTimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator7.1 High
- autodesk advance steel, autocad, autocad lt +9 more +11 moreTIF File Parsing Out-of-Bounds Read in certain Autodesk products5.5 Medium
- autodesk revit, autocad, autocad lt +1 more +3 morePDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products7.8 High
- ggml llama.cppllama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure6.3 Medium
- ggml llama.cppllama.cpp b3978–b9058 Integer Underflow via DRY Sampler8.5 High
- hdfgroup hdf5HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read6.8 Medium
- hdfgroup hdf5HDF5 out-of-bounds heap read in N-Bit filter decompression6.9 Medium
- electronElectron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size3.9 Low
- debevv nanomodbusnanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_id9.8 Critical
- linux, linux kernel +1 morebtrfs: reject free space cache with more entries than pages7.8 High
- No product listedS2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote...7.5 High
- opensipsOpenSIPS: OOB Read in Multipart Body Boundary Parsing5.3 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5 Medium
- systerel s2opcSysterel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds4.8 Medium
- microsoft stunnel, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreStunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message6.5 Medium
open62541Debianopen62541 1.5.5 contains an out-of-bounds read in the client-side function...7.5 High- academysoftwarefoundation openimageioOpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV5.5 Medium
- academysoftwarefoundation openimageioOpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS5.5 Medium
- academysoftwarefoundation openimageioOpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`5.5 Medium
- aio-libs aiohttpAIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)7.1 High
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr5.5 Medium
- mz automation libiec61850libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments8.2 High
- mz automation libiec61850mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds6.9 Medium
- mediatek mt6983 firmware, mt8676 firmware, mt8678 firmware +15 more +17 moreIn geniezone, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- mediatek mt6890 firmware, mt6988 firmware, mt6990 firmware +1 more +3 moreIn wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to...5.5 Medium
- mediatek mt6813 firmware, mt6982vb firmware, mt6986 firmware +3 more +5 moreIn ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to...4.4 Medium
- mediatek mt6991 firmware, mt6993 firmware, mt8126 firmware +15 more +17 moreIn display, there is a possible information disclosure due to an integer overflow. This could...4.4 Medium
- mediatek mt6991 firmware, mt6993 firmware, mt8126 firmware +15 more +17 moreIn display, there is a possible information disclosure due to a missing bounds check. This could...4.4 Medium
- mediatek mt2735 firmware, mt6833 firmware, mt6853 firmware +17 more +19 moreIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...7.5 High
- zephyrproject zephyrOut-of-bounds read in Zephyr OCPP 1.6 RPC message parser (parse_rpc_msg)7.0 High
- Show moreLoading…