← Back
CWE-125

9,140 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,140)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Fedoraproject
Redhat
3Enterprise Linux
FedoraShim
Jun 17, 2026
Jan 29, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.
2Fedoraproject
Redhat
3Enterprise Linux
FedoraShim
Jun 17, 2026
Jan 29, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shi...Show more
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.Show less
1Anti Virus
1Vba32
Jun 17, 2026
Jan 29, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver.
1Contiki Ng
1Tinydtls
Jun 17, 2026
Jan 24, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.
1Contiki Ng
1Contiki Ng Tinydtls
Jun 17, 2026
Jan 24, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().
1Linux
1Linux Kernel
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data a...Show more
An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.Show less
2Fedoraproject
Linux
2Fedora
Linux Kernel
Jun 17, 2026
Jan 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
1Swftools
1Swftools
Jun 17, 2026
Jan 19, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190.
1Google
1Android
Jun 17, 2026
Jan 18, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
1Google
1Android
Jun 17, 2026
Jan 18, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
1Google
1Android
Jun 17, 2026
Jan 18, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
1Google
1Android
Jun 17, 2026
Jan 18, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
3Couchbase
FedoraprojectGoogle
3Chrome
Couchbase ServerFedora
Jun 17, 2026
Jan 16, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Tianocore
1Edk2
Jun 17, 2026
Jan 16, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and pot...Show more
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.Show less
1Tianocore
1Edk2
Jun 17, 2026
Jan 16, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthori...Show more
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.Show less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Jan 16, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.
1Chromiumembedded
1Chromium Embedded Framework
Jun 17, 2026
Jan 13, 2024
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bou...Show more
Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e. Show less
1Chromiumembedded
1Chromium Embedded Framework
Jun 17, 2026
Jan 12, 2024
N/A· v4
9.6 CRITICAL· v3
N/A· v2
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, wh...Show more
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.Show less
2Debian
Linux
2Debian Linux
Linux Kernel
Jun 17, 2026
Jan 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard aga...Show more
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.Show less
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Jan 10, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process mem...Show more
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory.Show less