CWE-125
10,524 CVEs • Abstraction: Base
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CVEs (10,524)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 moreJun 17, 2026 Aug 13, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 moreJun 17, 2026 Aug 13, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Security Center Broker Information Disclosure Vulnerability |
1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 moreJun 17, 2026 Aug 13, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability |
1Microsoft 6Windows 11 21h2 Windows 11 22h2Windows 11 23h2+3 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Secure Channel Denial of Service Vulnerability |
1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Network Address Translation (NAT) Denial of Service Vulnerability |
Windows Bluetooth Driver Information Disclosure Vulnerability |
1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 NTFS Elevation of Privilege Vulnerability |
3Amd ArmTrustedfirmware3Trusted Firmware A Trusted Firmware ATrusted Firmware AJun 17, 2026 Aug 13, 2024 N/A· v4 5.8 MEDIUM· v3 N/A· v2 Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. |
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity. |
Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentia...Show more |
A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to cra...Show more |
The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current proc...Show more |
2Ggerganov Ggml2Llama.cpp Llama.cppJun 17, 2026 Aug 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561. |
llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b356...Show more |
1Nvidia 3Cloud Gaming Gpu Display DriverVirtual GpuJun 17, 2026 Aug 8, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code exe...Show more |
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vuln...Show more |
Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |