← Back
CWE-125

9,120 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,120)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
1Siemens
2Teamcenter Visualization
Tecnomatix Plant Simulation
Jun 17, 2026
Mar 11, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), T...Show more
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.Show less
1Siemens
2Teamcenter Visualization
Tecnomatix Plant Simulation
Jun 17, 2026
Mar 11, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), T...Show more
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.Show less
1Siemens
2Teamcenter Visualization
Tecnomatix Plant Simulation
Jun 17, 2026
Mar 11, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), T...Show more
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.Show less
1Google
1Chrome
Jun 17, 2026
Mar 10, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Android
Jun 17, 2026
Mar 10, 2025
N/A· v4
6.6 MEDIUM· v3
N/A· v2
In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User...Show more
In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User inte...Show more
In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware comp...Show more
In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User intera...Show more
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
1Samsung
10Exynos 1080 Firmware
Exynos 1280 FirmwareExynos 1330 Firmware+7 more
Jun 17, 2026
Mar 6, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds...Show more
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access. An attacker can send a malformed message to the target through the Wi-Fi driver.Show less
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in parsing rle of bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to혻read out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in appending text paragraph in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.