← Back
CWE-125

9,172 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,172)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
3.4 LOW· v3
N/A· v2
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
3.4 LOW· v3
N/A· v2
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
3.4 LOW· v3
N/A· v2
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.1 HIGH· v3
N/A· v2
The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the devi...Show more
The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability.Show less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.
1Huawei
1Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds acces...Show more
The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.Show less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
2Openatom
Openharmony
2Openharmony
Openharmony
Jun 17, 2026
Oct 14, 2022
N/A· v4
4.4 MEDIUM· v3
N/A· v2
OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unpriv...Show more
OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The processes with system user UID run on the device would be able to write out-of-bound memory which could lead to unspecified memory corruption.Show less
1Bentley
2Microstation
View
Jun 17, 2026
Oct 13, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code ex...Show more
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.Show less
1Bentley
2Microstation
View
Jun 17, 2026
Oct 13, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The f...Show more
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.Show less
1Bentley
2Microstation
View
Jun 17, 2026
Oct 13, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and co...Show more
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.Show less
2Fedoraproject
Freerdp
2Fedora
Freerdp
Jun 17, 2026
Oct 12, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP...Show more
FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.Show less
1Google
1Android
Jun 17, 2026
Oct 11, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interactio...Show more
In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-231986464Show less