← Back
CWE-125

10,524 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,524)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Samsung
1Notes
Jun 17, 2026
Aug 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
1Mozilla
3Firefox
Firefox EsrThunderbird
Jun 17, 2026
Aug 6, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 11...Show more
Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.Show less
1Ofono Project
1Ofono
Jun 17, 2026
Aug 6, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not requir...Show more
oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SMS message lists. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23157.Show less
1Qualcomm
164Ar8035 Firmware
Csr8811 FirmwareFastconnect 6700 Firmware+161 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
1Qualcomm
167Csr8811 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+164 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
1Qualcomm
96Ar8035 Firmware
Fastconnect 6700 FirmwareFastconnect 6800 Firmware+93 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing TID-to-link mapping IE elements.
1Qualcomm
148Ar8035 Firmware
Csr8811 FirmwareFastconnect 6700 Firmware+145 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing the received TID-to-link mapping action frame.
1Qualcomm
150Ar8035 Firmware
Csr8811 FirmwareFastconnect 6700 Firmware+147 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
1Qualcomm
192Ar8035 Firmware
Csr8811 FirmwareFastconnect 6200 Firmware+189 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
1Qualcomm
319315 5g Iot Modem Firmware
860 Mobile Platform FirmwareApq8064au Firmware+316 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing ESP IE from beacon/probe response frame.