CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages5.3 Medium
- freerdpFreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler7.1 High
- nvidia daliNVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds...7.3 High
- nvidia daliNVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds...7.3 High
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, desigo pxc00-e.d +12 more +14 moreA vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions),...6.9 Medium
- tiiny-ai powerinferTiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bounds4.8 Medium
- tiiny-ai powerinferTiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds4.8 Medium
libwebsocketsAlpaquitalibwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib...7.5 High- ibm iIBM i is Affected By A Denial of Service Vulnerability in Host Servers5.4 Medium
- turboderp-org exllamav3OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table9.8 Critical
- progress software corporation marklogic serverOut-of-bounds read in Progress MarkLogic Server7.1 High
- imagemagickImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option4.8 Medium
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder6.9 Medium
- imagemagickImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile6.9 Medium
- freerdpFreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read6.0 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing6.8 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName6.9 Medium
- netcore nr268Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds8.6 High
- zephyrproject zephyrOut-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name3.4 Low
- zephyrproject zephyrOut-of-bounds read in IPv6 route forwarding when the nexthop neighbor has no link-layer address7.1 High
- open asset import library assimpOpen Asset Import Library Assimp PLY File getNextBlock out-of-bounds5.1 Medium
libextutils-typemaps-default-perlDebian,perl-ExtUtils-Typemaps-DefaultMageia,perl-Math-ClipperopenSUSE +2 moreExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument9.1 Critical- apache software foundation datasketchesApache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch7.5 High
- apache software foundation datasketchesApache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch9.1 Critical
- apache software foundation datasketchesApache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch9.8 Critical
- riot-os riotRIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling8.2 High
- riot-os riotRIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size7.1 High
- devolutions server, mariadb +1 moreMariaDB: mysql_json plugin OOB reads4.4 Medium
- devolutions server, mariadb +1 moreMariaDB: `qc_info` plugin can do OOB reads if query contains \06.4 Medium
- open5gsOpen5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE6.9 Medium
- open5gsOpen5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE6.9 Medium
- canva affinityThe Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate...3.6 Low
- falkordbHeap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB8.8 High
- No product listedOpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP...7.5 High
- No product listedOpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP...7.5 High
- No product listedAn out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit...7.5 High
- No product listedAn out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit...7.5 High
- sumatrapdfreader sumatrapdfSumatraPDF: Untrusted binary record offset used without lower-bound validation6.8 Medium
- sumatrapdfreader sumatrapdfSumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service5.5 Medium
- sumatrapdfreader sumatrapdfSumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read5.5 Medium
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access3.7 Low
- mongodb python driverApplication denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver5.9 Medium
- ibm guardium data protectionIBM Guardium Data Protection Out-of-bounds Read8.1 High
- mongodb c driverOut-of-bounds read in SCRAM response parsing in MongoDB C Driver6.3 Medium
- mcollina msgpack5msgpack5: Truncated map32 headers throw an unexpected error7.5 High
- aorimn dislockerDislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size6.9 Medium
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Out-of-bounds Read8.2 High
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Out-of-bounds Read6.5 Medium
- glavsoft tightvncInteger underflow in TightVNC Server cursor shape trimming leads to out-of-bounds read6.1 Medium
- glavsoft tightvncOut-of-bounds read in TightVNC Viewer ZRLE palette decoding7.1 High
- Show moreLoading…