CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Standard XPS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Standard XPS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Standard XPS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Bluetooth Port Driver Information Disclosure Vulnerability4.7 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Information Disclosure Vulnerability6.5 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31) +13 more +15 moreMicrosoft SQL Server Information Disclosure Vulnerability6.5 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Denial of Service Vulnerability6.5 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Information Disclosure Vulnerability6.5 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability8.8 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreHeap Out-of-Bounds Read in MongoDB Server Query Planning Component5.3 Medium
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman5.3 Medium
- strukturag libheiflibheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)4.0 Medium
- 92181 markdown92181 markdown md.c lds out-of-bounds6.9 Medium
- modelcloud gptqmodelModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds5.3 Medium
- mediatek, inc. mediatek chipsetIn geniezone, there is a possible information disclosure due to a missing bounds check. This...4.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow3.5 Low
- valkey-io valkeyvalkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds2.3 Low
- the tcpdump group libpcapOOBR in libpcap before 1.10.75.5 Medium
- the tcpdump group libpcapOOBR and OOBW in libpcap before 1.10.78.7 High
- artem-ogre cdtCDT before 1.4.5 Out-of-Bounds Read via opposedVertexInd6.8 Medium
- genivia ugrepugrep before 7.6.0 Heap Buffer Over-read via .Z decompression4.8 Medium
- gnome libxml2In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds...2.9 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreLibtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize6.5 Medium
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]5.3 Medium
- tursodatabase tursoTurso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service6.8 Medium
- valkey-io valkeyvalkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds6.9 Medium
- freeipmiipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in...7.5 High
- strukturag libheiflibheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read6.5 Medium
- samsung open source rlottieOut-of-bounds read vulnerability in Samsung Opensource Escargot allows Overread Buffers. This...4.4 Medium
- themoos core-moosMOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet8.8 High
- mit moos-ivpMOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned8.7 High
- digilent dasylabOut Of Bounds Read during string conversion when parsing a .DSB file in DASYLab8.5 High
- digilent dasylabOut Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab8.6 High
- digilent dasylabOut Of Bounds Read in file handling when parsing a .DSB file in DASYLab8.5 High
- google chromeOut of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote...3.1 Low
- mongodb php driverHeap out-of-bounds read via corrupt nested BSON in field path error message6.9 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing5.3 Medium
- freerdpFreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC4445.3 Medium
- withastro astroAstro: Authorization bypass from missing path-segment boundary check when stripping the configured base6.3 Medium
- nasa-jpl ion-dtnION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv8.7 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX6.5 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: mtp: out-of-bounds read in do_read()4.3 Medium
- google androidIn multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to...6.2 Medium
- google androidIn Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an...8.4 High
- google androidIn get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing...8.4 High
- google androidIn gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a...5.5 Medium
- ffmpegBuffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of...2.9 Low
- google androidIn do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing...4.4 Medium
- systerel s2opcSysterel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds5.3 Medium
- Show moreLoading…