CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- No product listedAlgorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified4.4 Medium
- eclipse foundation netx duoMQTT WebSocket setter ABI mismatch may disclose memory or cause a crash7.5 High
- google chromeOut of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...4.7 Medium
- eugeny russh, rust pageant +1 morepageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)6.2 Medium
- eclipse foundation threadx netx duoUnbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read7.1 High
- eclipse foundation threadx netx duoOut-of-bounds Read from Unvalidated MSRP Attribute List Length7.1 High
- eclipse foundation threadx netx duoTFTP client and server copy the ERROR packet message without bounding the read against the packet6.9 Medium
- eclipse foundation threadx netx duoDHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer5.3 Medium
- eclipse foundation threadx netx duoOut-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length8.7 High
- eclipse foundation threadx netx duoICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanen…7.1 High
- eclipse foundation threadx netx duoUnbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall8.3 High
- eclipse foundation threadx netx duoOut-of-bounds read in the NetX Secure DTLS ClientHello parser6.3 Medium
- eclipse foundation threadxOut-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader6.9 Medium
- eclipse foundation threadxAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at...8.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreLibsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding8.2 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow during websocket message reassembly8.6 High
- opennmt ctranslate2CTranslate2 before 4.8.1 Out-of-Bounds Read via Model Deserialization6.9 Medium
- dmonad lib0lib0 `readFromDataView` out-of-bounds read8.6 High
- dmonad lib0lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory8.6 High
- bishopfox sliverSliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC6.8 Medium
- qt for mcusOut-of-bounds read vulnerability in string formatting impacts Qt for MCUs8.8 High
- zephyrproject zephyrInteger underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds read6.8 Medium
- faststone image viewerFastStone Image Viewer PCX Decoder out-of-bounds5.3 Medium
- faststone image viewerFastStone Image Viewer TGA Image FSViewer.exe out-of-bounds5.3 Medium
- zephyrproject zephyrOut-of-bounds read in CoAP well-known-core Uri-Query href matching (match_path_uri)3.7 Low
- wiresharkHeap-based Buffer Overflow in Wireshark5.5 Medium
- the x11 project libx11Out-of-bounds read in libX11's byte-oriented codeset parser5.1 Medium
- the x11 project libx11Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser5.5 Medium
- the x11 project libx11Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser6.5 Medium
- x.org libxiOut-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion5.6 Medium
- nationalsecurityagency ghidraGhidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager4.8 Medium
- phpOOB read / info leak in convert.* stream filters when line-break-chars contains NUL5.9 Medium
- pgpointcloud pointcloudpgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization7.2 High
- phpOut-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header5.8 Medium
- ibm server firmware, power system e1080 \(9080-hex\) firmware, power system e1180 \(9080-heu\) firmware +7 more +9 moreThis Power System update is being released to address7.1 High
- linux, linux kernel +1 moreppp_async: drop the errored frame instead of resetting its headroom5.5 Medium
- linux, linux kernel +1 moreaccel/qaic: Address potential out-of-bounds read in resp_worker()7.1 High
- linux, linux kernel +1 morebpf: Fix percpu map update indexing with sparse CPU IDs7.8 High
- linux, linux kernel +1 moreaccel/amdxdna: reject a command chain that carries no commands5.5 Medium
- linux, linux kernel +1 morentfs: bound $AttrDef table walk to the loaded table size7.1 High
- linux, linux kernel +1 moreBluetooth: btintel: validate version TLV value lengths7.1 High
- linux, linux kernel +1 moreBluetooth: btintel: bound firmware ID by TLV length7.1 High
- linux, linux kernel +1 moreipvs: fix reversed sequence option serialization4.4 Medium
- linux, linux kernel +1 moreASoC: Intel: avs: Refactor and fix init_config access5.5 Medium
- espressif esp-idfESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing4.3 Medium
- Show moreLoading…