← Back
CWE-125

10,490 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,490)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
16Windows 10 1507
Windows 10 1607Windows 10 1809+13 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
1Microsoft
16Windows 10 1507
Windows 10 1607Windows 10 1809+13 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 11 22h2
Windows 11 23h2Windows 11 24h2+4 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
-
Oct 8, 2026
Oct 14, 2025
N/A· v4
6.0 MEDIUM· v3
N/A· v2
A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.
1Mozilla
2Firefox
Thunderbird
Oct 23, 2026
Oct 14, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort...Show more
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.Show less
1Siemens
2Solid Edge Se2024
Solid Edge Se2025
Oct 23, 2026
Oct 14, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while...Show more
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.Show less
1Siemens
2Solid Edge Se2024
Solid Edge Se2025
Oct 23, 2026
Oct 14, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while...Show more
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.Show less
2Mediatek
Openwrt
2Openwrt
Software Development Kit
Oct 8, 2026
Oct 14, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploi...Show more
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475.Show less
1Fujielectric
1Monitouch V Sft
Oct 8, 2026
Oct 10, 2025
8.4 HIGH· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEN...Show more
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.Show less
1Fujielectric
1Monitouch V Sft
Oct 8, 2026
Oct 10, 2025
8.4 HIGH· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEN...Show more
An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.Show less
1Fujielectric
1Monitouch V Sft
Oct 8, 2026
Oct 10, 2025
8.4 HIGH· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and...Show more
An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.Show less
1Fujielectric
1Monitouch V Sft
Oct 8, 2026
Oct 10, 2025
8.4 HIGH· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEN...Show more
An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.Show less
1Samsung
1Notes
Oct 8, 2026
Oct 10, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
1Samsung
1Notes
Oct 8, 2026
Oct 10, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
1Samsung
1Notes
Oct 8, 2026
Oct 10, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
1Samsung
1Notes
Oct 8, 2026
Oct 10, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
1Samsung
1Android
Oct 8, 2026
Oct 10, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
1Samsung
1Android
Oct 8, 2026
Oct 10, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.