CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg7.6 High
- pbuchbinder mod qosMod_qos: out-of-bounds reads in response-body substring matching3.7 Low
- python pillowPillow multi-frame loaders can reuse stale native image storage after mode transitions9.8 Critical
- python pillowPillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)7.1 High
- zephyrproject zephyrOut-of-bounds read in Bluetooth Classic A2DP codec information element handling3.5 Low
- electronElectron: Off-screen rendering on macOS trusts GPU-supplied frame geometry3.9 Low
- electronElectron: Frame subscription trusts GPU-supplied frame geometry3.9 Low
- ntpsecOut-of-bounds Read in ntpsec7.5 High
- ntpsecOut-of-bounds Read in ntpsec5.2 Medium
- apache software foundation brpcApache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing4.3 Medium
- apache software foundation brpcApache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling7.5 High
- apache software foundation brpcApache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms7.5 High
- apache software foundation brpcApache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser7.5 High
- eclipse foundation openj9JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing8.7 High
- eclipse foundation openj9JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization8.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts6.2 Medium
- freerdpFreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline6.9 Medium
- freerdpVulnerability in FreeRDP7.1 High
- freerdpFreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message6.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string5.1 Medium
gpacUbuntuAn out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before...5.5 Mediumlibimager-perlDebian,perl-ImagerMageia +1 moreImager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images6.5 Medium- ibm qradarIBM QRadar SIEM Out-of-bounds Read8.2 High
- google chromeOut of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeOut of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...6.5 Medium
- google chromeOut of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a...6.5 Medium
- google chromeOut of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a...6.5 Medium
- google chromeOut of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a...6.5 Medium
- google chromeOut of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeOut of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeOut of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeOut of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a...6.5 Medium
- google chromeOut of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...6.5 Medium
- google chromeMemory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a...8.8 High
- google chromeMemory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...8.8 High
- mozilla thunderbirdUninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication5.3 Medium
- adobe acrobat for edgeAcrobat for Edge | Out-of-bounds Read (CWE-125)4.3 Medium
- eclipse foundation threadxModule block-pool create validates two of the four parameter words it reads4.8 Medium
- eclipse foundation threadxModule Manager object lookup validates one byte of a module's search name6.9 Medium
- eclipse foundation threadxModule delete dispatchers do not enforce kernel-object ownership before irreversible deletion6.9 Medium
- Show moreLoading…