CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.7 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.7 Medium
- capstone-engine capstoneCapstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode6.8 Medium
- libexpatExpat Out-of-Bounds Read via dtdCopy8.7 High
- sony xav-9500esSony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability3.5 Low
- m2team nanazipNanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value7.1 High
- liftoff-sr cipsterliftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds6.9 Medium
- liftoff-sr cipsterliftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds6.9 Medium
- wiresharkOut-of-bounds Read in Wireshark4.7 Medium
- wiresharkOut-of-bounds Read in Wireshark5.5 Medium
- wiresharkOut-of-bounds Read in Wireshark5.5 Medium
- wiresharkOut-of-bounds Read in Wireshark4.7 Medium
- microsoft windows app for mac, windows app +1 moreWindows App for Mac Information Disclosure Vulnerability6.5 Medium
- ibm iIBM i Denial of Service5.4 Medium
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 morePower System Out-of-bounds Read8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS3.3 Low
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 morePower System Out-of-bounds Read6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS4.8 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.4 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.3 Medium
- ibm power systems firmware, power hardware management console \(7063-cr2\) firmware, power system ac922 \(8335-gth\) firmware +8 more +10 morePower System Out-of-bounds Read7.3 High
- ibm power systems firmware, power system e1080 \(9080-hex\) firmware, power system e1180 \(9080-heu\) firmware +7 more +9 morePower System Out-of-bounds Read7.6 High
- ffmpegFFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c6.9 Medium
- ffmpegFFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c7.2 High
- freebsdHeap out-of-bounds access in semctl(2)7.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreSwtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch6.1 Medium
- zephyrproject zephyrOut-of-bounds read in Zephyr PTP message parsing from unvalidated message type6.5 Medium
- equinor surfiosurfio IRAP header size fields cause out-of-bounds reads9.8 Critical
- equinor resdataresdata insufficiently validates untrusted GRDECL files9.8 Critical
- knmi adaguc-serveradaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference4.0 Medium
- konstanty bialkowski libmodpluglibmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder6.3 Medium
- zabbixUse-after-free read in script item/preprocessing HttpRequest body6.8 Medium
- ericlbuehler mistral.rsEricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds5.3 Medium
- apple ipados, macos, safari +3 more +5 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...4.3 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26...6.6 Medium
- deskflowDeskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing8.2 High
- deskflowDeskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow client8.2 High
- slackhq nebulaTIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decoder8.7 High
- belledonnecommunications bcg729Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()8.7 High
- zephyrproject zephyr6LoWPAN IPHC uncompression out-of-bounds read on reserved destination addressing mode4.3 Medium
- beyondtrust endpoint privilege management (windows deployments)Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)7.3 High
- No product listedTrailDB TOC Validation tdb.c tdb_open out-of-bounds5.1 Medium
- linuxdm era: fix out-of-bounds memory access for non-zero start sector8.8 High
- linuxscsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 Critical
- linuxnet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 High
- linuxmacsec: don't read an unset MAC header in macsec_encrypt()7.3 High
- linuxwifi: cfg80211: validate EHT MLE before MLD ID read8.1 High
- Show moreLoading…