← Back
CWE-125

9,134 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,134)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Oct 7, 2024
N/A· v4
4.9 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more
In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998892; Issue ID: MSV-1601.Show less
1Google
1Android
Jun 17, 2026
Oct 7, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1630.Show less
1Google
1Android
Jun 17, 2026
Oct 7, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patc...Show more
In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900; Issue ID: MSV-1635.Show less
1Google
1Android
Jun 17, 2026
Oct 7, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patc...Show more
In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: MSV-1636.Show less
1Google
1Android
Jun 17, 2026
Oct 7, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1699.Show less
1Google
1Android
Jun 17, 2026
Oct 7, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701.Show less
1Zephyrproject
1Zephyr
Jun 17, 2026
Oct 4, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is empty.
1Draytek
1Vigor3910 Firmware
Jun 17, 2026
Oct 3, 2024
N/A· v4
8.0 HIGH· v3
N/A· v2
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations.
-
-
Jun 17, 2026
Oct 3, 2024
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver.
1Jtekt
1Kostac Plc
Jun 17, 2026
Oct 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved us...Show more
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.Show less
1Nvidia
1Triton Inference Server
Jun 17, 2026
Oct 1, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
NVIDIA Triton Inference Server contains a vulnerability where a user may cause an out-of-bounds read issue by releasing a shared memory region while it is in use. A successful exploit of this vulnerability may lead to de...Show more
NVIDIA Triton Inference Server contains a vulnerability where a user may cause an out-of-bounds read issue by releasing a shared memory region while it is in use. A successful exploit of this vulnerability may lead to denial of service.Show less
1Autodesk
1Navisworks
Jun 17, 2026
Sep 30, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute...Show more
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.Show less
1Nasa
1Cryptolib
Jun 17, 2026
Sep 27, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).
1Nasa
1Cryptolib
Jun 17, 2026
Sep 27, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c).
1Nasa
1Cryptolib
Jun 17, 2026
Sep 27, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c).
1Google
1Android
Jun 17, 2026
Sep 27, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
-
-
Jun 17, 2026
Sep 20, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.
1Openplcproject
1Openplc V3 Firmware
Jun 17, 2026
Sep 18, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of se...Show more
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.This is the final instance of the incorrect comparison.Show less
1Openplcproject
1Openplc V3 Firmware
Jun 17, 2026
Sep 18, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of se...Show more
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.This is the first instance of the incorrect comparison.Show less
1Opennetworking
1Libfluid Msg
Jun 17, 2026
Sep 18, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0...Show more
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.Show less