CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- ffmpegFFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via malformed pam v1 requests4.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)4.0 Medium
- marcobambini gravitymarcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds5.1 Medium
- memcachedmemcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds6.9 Medium
- matthias-wandel jheadMatthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds4.8 Medium
- samsung exynos 1330 firmwareAn issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580...2.8 Low
- samsung exynos 850 firmwareAn issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480,...2.8 Low
- withsecure atlantWithsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service...3.7 Low
- postgis address standardizerPostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weight7.1 High
- ffmpegFFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in...2.9 Low
- ffmpegFFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata...2.9 Low
- cdcseacave tinyexifTinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable...2.9 Low
- luben zstd-jnizstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompress8.8 High
- freecivFreeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame6.9 Medium
- citirx workspace app for windowsOut-of-Bounds Read4.8 Medium
- qtOut-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module6.9 Medium
- pcre pcre2PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF...3.7 Low
- pcre pcre2PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can...2.9 Low
- netskope endpoint dlpNetskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash6.0 Medium
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load6.9 Medium
- luben zstd-jnizstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset8.8 High
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch8.6 High
- schreibfaul1 esp32-audioi2sESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Header7.1 High
- bosch sensortec bme690 sensorapi (c)An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in...4.3 Medium
r-cran-readxlDebianAn out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due...7.5 High- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound4.3 Medium
- eprosima fast-ddsFast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage9.1 Critical
- luben zstd-jnizstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect8.7 High
- videolan vlc media playerVLC media player 3.0.0 through 3.0.23 information disclosure vulnerability5.3 Medium
- luben zstd-jnizstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompress8.8 High
- huawei harmonyosOut-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this...5.9 Medium
- huawei harmonyosOOB write vulnerability in the rendering and composition module. Impact: Successful exploitation...7.3 High
- google chromeOut of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...4.7 Medium
- google chromeOut of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...4.3 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...4.3 Medium
- google chromeOut of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a...6.1 Medium
- google chromeOut of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who...8.3 High
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...4.3 Medium
- google chromeOut of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...2.7 Low
- google chromeOut of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...8.8 High
- gpacAn out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26...6.5 Medium
libstbDebianAn out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of nothings stb commit...4.0 MediumlibstbDebianAn out-of-bounds read in the stbtt_GetGlyphShape component of nothings stb commit 31c1ad3 allows...4.3 Medium- gpacAn out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows...6.5 Medium
- cyrus imap, cyrusimap cyrus imap +1 moreAn issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an...3.1 Low
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +4 more +6 moreDpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler3.3 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block6.1 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- Show moreLoading…