← Back
CWE-125

9,171 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,171)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Autodesk
1Fbx Review
Jun 17, 2026
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are create...Show more
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Google
1Android
Jun 17, 2026
Apr 11, 2022
N/A· v4
6.6 MEDIUM· v3
4.4 MEDIUM· v2
In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional...Show more
In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06183301; Issue ID: ALPS06183301.Show less
1Google
1Android
Jun 17, 2026
Apr 11, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108658; Issue ID: ALPS06108658.Show less
1Google
1Android
Jun 17, 2026
Apr 11, 2022
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitati...Show more
In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617.Show less
1Radare
1Radare2
Jun 17, 2026
Apr 11, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
1Radare
1Radare2
Jun 17, 2026
Apr 11, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
1Mruby
1Mruby
Jun 17, 2026
Apr 10, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
2Fedoraproject
Lua
2Fedora
Lua
Jun 17, 2026
Apr 8, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
1Jerryscript
1Jerryscript
Jun 17, 2026
Apr 7, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-296...Show more
A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-29657.Show less
1Codesys
18Control For Beaglebone Sl
Control For Beckhoff Cx9020Control For Empc A/imx6 Sl+15 more
Jun 17, 2026
Apr 7, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
2Debian
Pjsip
2Debian Linux
Pjsip
Jun 17, 2026
Apr 6, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that dire...Show more
PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.Show less
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Bandisoft
1Bandizip
Jun 17, 2026
Apr 1, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
1Qemu
1Qemu
Jun 17, 2026
Apr 1, 2022
N/A· v4
6.5 MEDIUM· v3
2.1 LOW· v2
It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for th...Show more
It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756, refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756.Show less
1Radare
1Radare2
Jun 17, 2026
Apr 1, 2022
N/A· v4
6.6 MEDIUM· v3
4.3 MEDIUM· v2
Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary.
1Qualcomm
102Apq8096au Firmware
Aqt1000 FirmwareAr8031 Firmware+99 more
Jun 17, 2026
Apr 1, 2022
N/A· v4
9.1 CRITICAL· v3
9.4 HIGH· v2
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra...Show more
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
1Qualcomm
112Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+109 more
Jun 17, 2026
Apr 1, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr...Show more
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
1Qualcomm
185Aqt1000 Firmware
Ar8035 FirmwareAr9380 Firmware+182 more
Jun 17, 2026
Apr 1, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...Show more
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
1Google
1Android
Jun 17, 2026
Mar 30, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...Show more
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-205989472Show less