CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- sumatrapdfreader sumatrapdfSumatraPDF: Heap out-of-bounds read in MOBI header parser.6.8 Medium
- x.org libxiOut-of-bounds read in libXi's XListInputDevices() class parsing6.5 Medium
- x.org libxiOut-of-bounds read in libXi's XListInputDevices()6.5 Medium
- x.org libxiOut-of-bounds read in libXi's XI2 XIQueryDevice reply parsing6.5 Medium
- x.org libxiOut-of-bounds read in libXi's XI2 class parser7.4 High
- x.org libxiOut-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()6.5 Medium
- x.org libxiOut-of-bounds read in libXi's XQueryDeviceState()6.5 Medium
- altera trusted firmwareCrafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.8.3 High
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 moreThis Power System update is being released to address4.3 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +15 more +17 moreThis Power System update is being released to address3.4 Low
- offis dcmtkDCMTK through 3.7.0 Heap Over-read via NumberOfFrames8.8 High
- rapid7 velociraptorVelociraptor Prefetch parser out of bounds3.6 Low
- huawei harmonyosOut-of-bounds read vulnerability in the graphics module. Successful exploitation of this...5.9 Medium
jsmnDebianzserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().7.3 HighsimdjsonAlpaquitasimdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser:...6.5 Medium- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loader2.5 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: out-of-bounds heap read in the 4bpp tim image loader4.4 Medium
- red hat hardened imagesBusybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthello5.3 Medium
- red hat hardened imagesBusybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages6.1 Medium
- claris filemaker serverAn out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a...9.1 Critical
- qtOut-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick0.6 Low
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability6.1 Medium
libxs-parse-keyword-perlDebian,perl-XS-Parse-KeywordMageia +1 moreXS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference7.5 High- adobe bridgeBridge | Out-of-bounds Read (CWE-125)5.5 Medium
- @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 moreA malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability...7.5 High
- @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 moreA malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability...7.5 High
- rti connext professionalOut-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.6.8 Medium
- rti connext professionalOut-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Ov…6.8 Medium
- rti connext professionalOut-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Ov…6.8 Medium
- radare radare2radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode3.3 Low
- radare radare2radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser3.3 Low
- radare radare2radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser2.5 Low
- radare radare2radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling5.5 Medium
- radare radare2radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser3.3 Low
- the document foundation libreofficeOut of bounds read in PICT image import5.4 Medium
- the document foundation libreofficeHeap buffer overflow in PDF import stream handling5.4 Medium
- the document foundation libreofficeHeap buffer overflow in WMF text record import5.4 Medium
libnet-idn-encode-perlDebian,perl-Net-IDN-EncodeopenSUSE +1 moreNet::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode6.5 Medium- No product listedAn out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact...7.5 High
- zephyrproject zephyrOut-of-bounds read and permanent loss of Wi-Fi reception in the ESP-hosted SPI driver's frame reassembly5.3 Medium
- ibm mq for hpe nonstopIBM MQ for HPE NonStop is vulnerable to a denial of service issue8.1 High
- osmocom libsmpp34Out of bounds read at smpp34_unpack()7.5 High
- nanomqNanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing7.0 High
- strukturag libheiflibheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV3.7 Low
- academysoftwarefoundation openimageioOpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set6.1 Medium
- zephyrproject zephyrOut-of-bounds read in gPTP Announce path-trace validation via unvalidated stepsRemoved4.3 Medium
- zephyrproject zephyrOut-of-bounds read in the Zephyr gPTP receive path when handling short Ethernet frames3.1 Low
- Show moreLoading…