CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- capstone-engine capstoneCapstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes5.1 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.4 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.4 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer5.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer6.5 Medium
- absolute secure accessCVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version...8.7 High
- postgisPostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer7.2 High
- lenovo 100w gen 4 laptop (lenovo) elan trackpoint driver for windows 11 (version 22h2 or later) - lenovo 100w gen 4, 300w yoga gen 4, 500w yoga gen 4, 100w gen 5 (type 83ld, 83le) laptop (lenovo) elan trackpoint driver for windows 11 (version 23h2 or later) - lenovo 100w gen 5, 300w 2-in-1 gen 5, 500w 2-in-1 gen 5, 11e yoga gen 6 (type 20se, 20sf) laptop (thinkpad) elan clickpad driver for windows 11 (version 21h2 or later), 10 (version 1809 or later) - thinkpad yoga 11e 6th gen +259 more +261 moreELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that,...5.7 Medium
- linuxs390/zcrypt: Fix buffer over-read in cca_cipher2protkey7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr6.6 Medium
- ibm iIBM i is Affected By Denial of Service Vulnerability []8.2 High
- rsyslog, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreRsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd7.5 High
- aws aws-sdk-cpp, amazon aws software development kit +1 moreOut-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms6.0 Medium
- sipsorcery-org sipsorcerySIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS)7.5 High
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing6.1 Medium
- ibm iIBM i is Affected By Out-of-Bounds Read Vulnerability []7.7 High
- zephyrproject zephyrOut-of-bounds read via unvalidated stream_id in Intel ALH DAI get_properties6.1 Medium
- linuxdrm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size7.1 High
- linuxlibceph: bound get_version reply decode to front len8.6 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreOut-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreOut-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Management Instrumentation Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +12 more +14 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +10 more +12 moreMicrosoft Office Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +5 more +7 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows SMB Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…