← Back
CWE-125

9,172 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,172)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-21746
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479698; Issue ID: ALPS06479698.Show less
CVE-2022-1987
1Libmobi Project
1Libmobi
Jun 17, 2026
Jun 3, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
CVE-2022-32200
1Libdwarf Project
1Libdwarf
Jun 17, 2026
Jun 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.
CVE-2022-31796
1Jpeg
1Libjpeg
Jun 17, 2026
Jun 2, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
CVE-2022-29488
1Hornerautomation
1Cscape
Jun 17, 2026
Jun 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.
CVE-2020-26185
2Dell
Oracle
5Bsafe Micro Edition Suite
DatabaseHttp Server+2 more
Jun 17, 2026
Jun 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.
CVE-2022-31001
2Debian
Signalwire
2Debian Linux
Sofia Sip
Jun 17, 2026
May 31, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caus...Show more
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caused by `#define MATCH(s, m) (strncmp(s, m, n = sizeof(m) - 1) == 0)`, which will make `n` bigger and trigger out-of-bound access when `IS_NON_WS(s[n])`. Version 1.13.8 contains a patch for this issue.Show less
CVE-2022-31002
2Debian
Signalwire
2Debian Linux
Sofia Sip
Jun 17, 2026
May 31, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be ca...Show more
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with `%`. Version 1.13.8 contains a patch for this issue.Show less
CVE-2022-1927
3Apple
FedoraprojectVim
3Fedora
MacosVim
Jun 17, 2026
May 29, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-1908
1Libmobi Project
1Libmobi
Jun 17, 2026
May 27, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
CVE-2022-1907
1Libmobi Project
1Libmobi
Jun 17, 2026
May 27, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
CVE-2022-26770
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execut...Show more
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-26718
1Apple
1Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges.
CVE-2022-26698
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript b...Show more
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
CVE-2022-26697
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript...Show more
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
CVE-2022-22674
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS B...Show more
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.Show less
CVE-2022-1899
1Radare
1Radare2
Jun 17, 2026
May 26, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
CVE-2022-1851
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2021-42700
1Inkscape
1Inkscape
Jun 17, 2026
May 18, 2022
N/A· v4
3.3 LOW· v3
3.5 LOW· v2
Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.
CVE-2022-30976
1Gpac
1Gpac
Jun 17, 2026
May 18, 2022
N/A· v4
7.1 HIGH· v3
4.0 MEDIUM· v2
GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.