← Back
CWE-125

10,494 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,494)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
1Samsung
1Notes
Jun 17, 2026
Mar 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying binary of drawing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
1Google
1Chrome
Jun 17, 2026
Mar 5, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Mar 5, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Mar 5, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Mar 4, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Th...Show more
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.Show less
1Vmware
6Cloud Foundation
EsxiFusion+3 more
Jun 17, 2026
Mar 4, 2025
N/A· v4
6.0 MEDIUM· v3
N/A· v2
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this...Show more
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.Show less
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.
1Openatom
1Openharmony
Jun 17, 2026
Mar 4, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
1Qualcomm
187Aqt1000 Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+184 more
Jun 17, 2026
Mar 3, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
1Google
1Android
Jun 17, 2026
Mar 3, 2025
N/A· v4
4.6 MEDIUM· v3
N/A· v2
In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges n...Show more
In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291215; Issue ID: MSV-2052.Show less
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Mar 3, 2025
N/A· v4
4.1 MEDIUM· v3
N/A· v2
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges need...Show more
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2062.Show less
1Google
1Android
Jun 17, 2026
Mar 3, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio...Show more
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584.Show less