CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- eclipse foundation threadxCortex-A7 module data validation checks only the first address of a caller-supplied range8.5 High
- eclipse foundation threadx - netx duoOut-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure8.7 High
- eclipse foundation threadx - netx duoOut-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure8.7 High
- eclipse foundation threadx - guixOut-of-bounds read when a multi-line text view string ends with a carriage return4.6 Medium
- eclipse foundation threadx - guixJPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode6.8 Medium
- eclipse foundation threadx - guixJPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size6.8 Medium
- eclipse foundation threadx - guixGUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader6.8 Medium
- eclipse foundation threadx - guixPNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write8.4 High
- eclipse foundation threadxModule queue front-send validates a word count as a byte count4.8 Medium
- eclipse foundation threadx - usbxUSBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count5.2 Medium
- eclipse foundation threadx - usbxVIDEO class descriptor walk consumes device-controlled wTotalLength as its bound4.9 Medium
- eclipse foundation threadx - usbxOut-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser4.9 Medium
- advantech adam-3600A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.6.9 Medium
- qtQBinaryJson::fromBinaryData() integer overflow leading to OOB read4.3 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27...4.3 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26...6.5 Medium
- apple xcodeAn out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode...3.3 Low
- ning compress-lzfNing compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder8.8 High
gpacUbuntuA segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of...5.5 Medium- python pillowPillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read8.8 High
- python pillowPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing7.1 High
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 moreIBM MQ Out-of-bounds Read3.1 Low
- xqq libaribcaptionlibaribcaption 1.1.0 through 1.1.2 Out-of-Bounds Read via DecoderImpl::HandleGLGR4.8 Medium
- libblurayVideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point6.8 Medium
- rdesktoprdesktop through 1.9.0 Heap Out-of-Bounds Read via process_bmpcache27.1 High
- rdesktoprdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache7.1 High
- rdesktoprdesktop through 1.9.0 Heap Out-of-Bounds Read via process_plane7.1 High
- netpbmNetpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap6.9 Medium
- libtinslibtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init6.3 Medium
- libtinslibtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name6.9 Medium
- emersion libdisplay-infolibdisplay-info 0.4.0 Heap Out-of-Bounds Read via DisplayID v2 Parser6.8 Medium
- emersion libdisplay-infolibdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser6.8 Medium
- tencent ncnnTencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds5.3 Medium
- rtmpdump librtmplibrtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Read via AMFProp_Decode5.3 Medium
- videolan libdvdnavlibdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT6.8 Medium
- videolan libdvdnavlibdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters6.8 Medium
- wvware wvwvWare wv through 1.2.9 Heap Out-of-Bounds Read via wvGetSTSH6.8 Medium
- wvware wvwvWare wv through 1.2.9 Stack Out-of-Bounds Read via wvGetPAPX_FKP and wvGetCHPX_FKP6.8 Medium
- schroedingerSchroedinger libschroedinger through 1.0.11 Out-of-Bounds Read via schro_params_set_default_quant_matrix6.8 Medium
- lvandeve lodepngLodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()6.9 Medium
- jkuhlmann cgltfcgltf through 1.15 Heap Out-of-Bounds Read via cgltf_accessor_unpack_floats()6.9 Medium
- icculus smpegsmpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer6.8 Medium
- adri van os antiwordAntiword through 0.37 Stack Out-of-Bounds Read via prop8.c FKP Parsing4.8 Medium
- adri van os antiwordAntiword through 0.37 Heap Out-of-Bounds Read via vGet8LstInfo in prop8.c6.8 Medium
- freertos freertos-kernelNumeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel9.3 Critical
- riot-os riotRIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read9.8 Critical
- mz automation libiec61850libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU8.7 High
- gomarkdown markdowngomarkdown/markdown IsSafeURL panics on short URLs7.5 High
- delta electronics ispsoftISPSoft Out-of-Bounds Read Vulnerability7.0 High
- Show moreLoading…