← Back
CWE-125

9,103 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,103)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1Substance 3d Painter
Jun 17, 2026
Aug 12, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a vic...Show more
Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Substance 3d Modeler
Jun 17, 2026
Aug 12, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a vict...Show more
Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Microsoft
7Windows Server 2008
Windows Server 2012Windows Server 2016+4 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
-
-
Jun 17, 2026
Aug 12, 2025
5.9 MEDIUM· v4
4.4 MEDIUM· v3
N/A· v2
Out-of-bounds read in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via network access.
1Intel
1Tdx Module
Jun 17, 2026
Aug 12, 2025
5.7 MEDIUM· v4
5.6 MEDIUM· v3
N/A· v2
Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access.
1Ivanti
4Connect Secure
Neurons For Secure AccessPolicy Secure+1 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix d...Show more
A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service. CWE-125Show less
1Siemens
1Simcenter Femap
Jun 17, 2026
Aug 12, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an out of bounds read vulnerability while pa...Show more
A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.Show less
-
-
Jun 17, 2026
Aug 12, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error. On successful exploitati...Show more
SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error. On successful exploitation, this results in the crash of the target component. Multiple submissions can make the target completely unavailable. A similarly crafted submission can be used to perform an out-of-bounds read operation as well, revealing sensitive information that is loaded in memory at that time. There is no ability to modify any information.Show less
-
-
Jun 17, 2026
Aug 7, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commi...Show more
An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005.Show less
2Gstreamer
Gstreamer Project
2Gstreamer
Gstreamer
Jun 17, 2026
Aug 7, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.
2Gstreamer
Gstreamer Project
2Gstreamer
Gstreamer
Jun 17, 2026
Aug 7, 2025
N/A· v4
6.6 MEDIUM· v3
N/A· v2
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.
1Autodesk
13ds Max
Jun 17, 2026
Aug 6, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or ex...Show more
A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.Show less
1Nvidia
1Triton Inference Server
Jun 17, 2026
Aug 6, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability mi...Show more
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability might lead to information disclosure.Show less
1Nvidia
1Triton Inference Server
Jun 17, 2026
Aug 6, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by manipulating shared memory data. A successful exploit of this vu...Show more
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by manipulating shared memory data. A successful exploit of this vulnerability might lead to information disclosure.Show less
1Qualcomm
347315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+344 more
Jun 17, 2026
Aug 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Information disclosure while processing the hash segment in an MBN file.
1Qualcomm
340315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+337 more
Jun 17, 2026
Aug 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Information disclosure while reading data from an image using specified offset and size parameters.
1Samsung
1Blockchain Keystore
Jun 17, 2026
Aug 6, 2025
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory.
1Huawei
1Harmonyos
Jun 17, 2026
Aug 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability.
1Huawei
1Harmonyos
Jun 17, 2026
Aug 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Aug 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.