CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- kamailioKamailio AVP cxdx_avp.c get_4bytes out-of-bounds5.3 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreDTLS Retransmits Handshake Messages From a Stale Buffer Offset8.2 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=06.1 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can open many connections to the imap-hibernate service...4.3 Medium
- watchguard fireware osFireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- google chromeOut of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...8.8 High
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Out-of-bounds Read (CWE-125)5.5 Medium
- hank-ai darknetdarknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser6.9 Medium
- suse wickedwicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length5.3 Medium
- zephyrproject zephyrOut-of-bounds read in PTP management TLV TIME parsing in Zephyr net PTP5.4 Medium
- zephyrproject zephyrOut-of-bounds read in LoRaWAN fragmented data block transport (FUOTA) downlink handler3.1 Low
- zephyrproject zephyrOut-of-bounds read in LoRaWAN clock-sync AppTimeAns downlink handler3.1 Low
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation4.4 Medium
- google chromeOut of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who...6.5 Medium
- google chromeOut of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeOut of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who...3.4 Low
- google chromeOut of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...8.8 High
- google chromeOut of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.1 High
- google chromeOut of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...9.6 Critical
- academysoftwarefoundation openexrOpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow7.1 High
- academysoftwarefoundation openexrOpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)6.7 Medium
- academysoftwarefoundation openexrOpenEXR: Empty multiView viewFromChannelName file crash5.5 Medium
- academysoftwarefoundation openexrOpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP325.5 Medium
- academysoftwarefoundation openexrOpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP325.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe illustrator, illustrator desktop 2025, illustrator desktop 2026 +2 moreIllustrator | Out-of-bounds Read (CWE-125)5.5 Medium
- academysoftwarefoundation openexrOpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin7.1 High
- ni labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VI8.5 High
- ni labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VI8.5 High
- ni labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VI8.5 High
- ni labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VI8.5 High
- nvidia dgx spark, dgx spark uefi +1 moreNVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could...6.0 Medium
- zephyrproject zephyrOut-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s_blocks_count5.5 Medium
- autodesk 3ds maxSVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds Max5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader6.1 Medium
- No product listedOpen5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds5.3 Medium
- No product listedAn out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of...6.5 Medium
- No product listedAn out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage...7.1 High
- systerel s2opcSysterel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-bounds6.3 Medium
- gnu emacsGNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader6.9 Medium
- amazon freertos, freertos freertos-kernel +1 moreMissing type validation in xQueueAddToSet in FreeRTOS-Kernel8.2 High
- internationalcolorconsortium iccdeviccDEV: CIccEmbedIO::Read8() size_t underflow6.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS...4.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.9 High
- Show moreLoading…