← Back
CWE-125

10,487 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,487)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine() when iccApplyProfiles processes a crafted TIFF ima...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine() when iccApplyProfiles processes a crafted TIFF image, causing memory disclosure or crash. This vulnerability is fixed in 2.3.1.5.Show less
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault from invalid/wild pointer read in CIccCLUT::Interp3d() causing a denial of serv...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault from invalid/wild pointer read in CIccCLUT::Interp3d() causing a denial of service. This vulnerability is fixed in 2.3.1.5.Show less
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence() causing...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence() causing denial of service. This vulnerability is fixed in 2.3.1.5.Show less
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash....Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability is fixed in 2.3.1.5.Show less
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence() causing an application crash. This...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence() causing an application crash. This vulnerability is fixed in 2.3.1.5.Show less
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccPcsXform::pushXYZConvert() causing crash and potentially leaking me...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccPcsXform::pushXYZConvert() causing crash and potentially leaking memory contents. This vulnerability is fixed in 2.3.1.5.Show less
1Color
1Iccdev
Jun 17, 2026
Mar 10, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlArrayType<>::DumpArray() causing out-of-bounds read and/or cra...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlArrayType<>::DumpArray() causing out-of-bounds read and/or crash. This vulnerability is fixed in 2.3.1.5.Show less
1Microsoft
2.net
Bcl.memory
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.
1Microsoft
16365 Copilot
OfficeWindows 10 1607+13 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
1Microsoft
10Windows 10 1607
Windows 10 1809Windows 10 21h2+7 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 1607
Windows 10 1809Windows 10 21h2+5 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
1Imagemagick
1Imagemagick
Jun 17, 2026
Mar 10, 2026
N/A· v4
4.4 MEDIUM· v3
N/A· v2
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When proce...Show more
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds read can occur. This vulnerability is fixed in 7.1.2-16.Show less
1Imagemagick
1Imagemagick
Jul 15, 2026
Mar 10, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vu...Show more
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.Show less
1Imagemagick
1Imagemagick
Jun 17, 2026
Mar 10, 2026
N/A· v4
4.8 MEDIUM· v3
N/A· v2
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a...Show more
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.Show less
1Deltaww
1Commgr2
Jun 17, 2026
Mar 9, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.