← Back
CWE-125

10,524 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,524)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
1Microsoft
7Windows 10 1809
Windows 10 21h2Windows 10 22h2+4 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Security Center Broker Information Disclosure Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Windows Kernel Information Disclosure Vulnerability
1Microsoft
6Windows 11 21h2
Windows 11 22h2Windows 11 23h2+3 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Secure Channel Denial of Service Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Network Address Translation (NAT) Denial of Service Vulnerability
1Microsoft
1Windows 11 24h2
Jun 17, 2026
Aug 13, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Windows Bluetooth Driver Information Disclosure Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
NTFS Elevation of Privilege Vulnerability
3Amd
ArmTrustedfirmware
3Trusted Firmware A
Trusted Firmware ATrusted Firmware A
Jun 17, 2026
Aug 13, 2024
N/A· v4
5.8 MEDIUM· v3
N/A· v2
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
-
-
Jun 17, 2026
Aug 13, 2024
N/A· v4
5.2 MEDIUM· v3
N/A· v2
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
-
-
Jun 17, 2026
Aug 13, 2024
N/A· v4
3.9 LOW· v3
N/A· v2
Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentia...Show more
Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service.Show less
-
-
Jun 17, 2026
Aug 13, 2024
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to cra...Show more
A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.Show less
-
-
Jun 17, 2026
Aug 12, 2024
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current proc...Show more
The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.Show less
2Ggerganov
Ggml
2Llama.cpp
Llama.cpp
Jun 17, 2026
Aug 12, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561.
2Ggerganov
Ggml
2Llama.cpp
Llama.cpp
Jun 17, 2026
Aug 12, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b356...Show more
llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.Show less
1Nvidia
3Cloud Gaming
Gpu Display DriverVirtual Gpu
Jun 17, 2026
Aug 8, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code exe...Show more
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.Show less
1Nvidia
1Cuda Toolkit
Jun 17, 2026
Aug 8, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vuln...Show more
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vulnerability might lead to denial of service.Show less
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory.