← Back
CWE-125

10,630 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,630)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33098
1Qualcomm
257315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+254 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVE-2023-33097
1Qualcomm
121Ar8035 Firmware
Csr8811 FirmwareFastconnect 6900 Firmware+118 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware while processing a FTMR frame.
CVE-2023-33081
1Qualcomm
148Aqt1000 Firmware
Ar8035 FirmwareCsr8811 Firmware+145 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
CVE-2023-33080
1Qualcomm
365315 5g Iot Modem Firmware
8098 Firmware8998 Firmware+362 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-49285
1Squid Cache
1Squid
Jun 17, 2026
Dec 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid...Show more
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-45781
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed f...Show more
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-40083
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed f...Show more
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2023-32870
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363740; Issue ID: ALPS07363740.Show less
CVE-2023-32863
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326314; Issue ID: ALPS07326314.Show less
CVE-2023-32862
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388762; Issue ID: ALPS07388762.Show less
CVE-2023-32861
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08059081; Issue ID: ALPS08059081.Show less
CVE-2023-32857
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio...Show more
In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS07993710.Show less
CVE-2023-32856
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio...Show more
In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS07993705.Show less
CVE-2023-42731
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42728
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVE-2023-42726
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42725
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42724
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42723
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVE-2023-42720
1Google
1Android
Jun 17, 2026
Dec 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed