CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- freebsdMemory safety bugs in kqueue copy-on-fork implementation7.0 High
- hewlett packard enterprise hpe nonstop expandHPE NonStop EXPAND - Out-of-Bounds memory read vulnerability5.7 Medium
- hewlett packard enterprise hpe nonstop expandHPE NonStop EXPAND - Out-of-Bounds memory read4.7 Medium
- hewlett packard enterprise hpe nonstop expandHPE NonStop EXPAND - Buffer Overflow vulnerability7.1 High
- hewlett packard enterprise hpe nonstop expandHPE NonStop EXPAND - Out-of-Bounds memory read/write6.4 Medium
- ggml-org whisper.cppggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds2.4 Low
- oaid tengineOAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds5.3 Medium
- opensipsOpenSIPS rtpproxy rtpproxy_answer out-of-bounds6.9 Medium
- automattic mongooseMongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)8.8 High
- automattic mongooseMongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection7.5 High
- automattic mongooseMongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser7.5 High
- automattic mongooseMongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX7.5 High
- eclipse foundation threadx netx duoOut-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled7.1 High
- zephyrproject zephyrOut-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driver4.2 Medium
- zephyrproject zephyrOut-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used5.3 Medium
- twogood unshieldunshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table6.8 Medium
- sahlberg libsmb2libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoders7.1 High
- sahlberg libsmb2libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info7.1 High
- cgnsCGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_header4.8 Medium
- vgmstreamvgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decoder4.8 Medium
- freeswitch sofia-sipSofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse6.9 Medium
- miniupnp project miniupnpcminiupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseelt2.3 Low
- miniupnp project miniupnpcminiupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseatt2.3 Low
- librecad libdxfrw, librecad +1 moreLibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds Read via dwgReader18::readFileHeader4.8 Medium
- libyal libpffLibyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value6.9 Medium
- syoyo tinyexrTinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory6.9 Medium
- icculus physicsfsPhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint4.8 Medium
- red hat hardened imagesBusybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption3.3 Low
- citirx citrix workspace app for windows, citrix workspace app for windows +1 moreOut-of-Bounds Write and Out-of-Bounds Read5.8 Medium
- adobe bridgeBridge | Out-of-bounds Read (CWE-125)5.5 Medium
- microsoft sql server 2019 (gdr), sql server 2019 for x64-based systems (cu32), sql server 2022 (gdr) +3 more +5 moreMicrosoft SQL Server Information Disclosure Vulnerability5.3 Medium
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +5 more +7 moreMicrosoft SQL Server Information Disclosure Vulnerability7.7 High
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +5 more +7 moreMicrosoft SQL Server Information Disclosure Vulnerability7.7 High
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +5 more +7 moreMicrosoft SQL Server Information Disclosure Vulnerability4.9 Medium
- adobe substance 3d designerSubstance3D - Designer | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance 3d designerSubstance3D - Designer | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance 3d samplerSubstance3D - Sampler | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance 3d samplerSubstance3D - Sampler | Out-of-bounds Read (CWE-125)5.5 Medium
- okta credential provider for windowsImproper Input Validation in the Okta Credential Provider for Windows6.0 Medium
- adobe substance 3d stagerSubstance3D - Stager | Out-of-bounds Read (CWE-125)7.8 High
- adobe substance 3d stagerSubstance3D - Stager | Out-of-bounds Read (CWE-125)7.8 High
- adobe substance 3d stagerSubstance3D - Stager | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance 3d stagerSubstance3D - Stager | Out-of-bounds Read (CWE-125)7.8 High
- adobe dimensionDimension | Out-of-bounds Read (CWE-125)5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRole: DNS Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRole: DNS Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRole: DNS Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRole: DNS Server Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…