← Back
CWE-125

10,628 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,628)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Vmware
2Fusion
Workstation
Jun 17, 2026
Oct 20, 2023
N/A· v4
6.0 MEDIUM· v3
N/A· v2
VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicio...Show more
VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.Show less
1Santesoft
1Fft Imaging
Jun 17, 2026
Oct 19, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code i...Show more
Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.Show less
1Google
1Android
Jun 17, 2026
Oct 18, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User int...Show more
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Oct 18, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges n...Show more
In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
2Netapp
Oracle
2Mysql
Oncommand Insight
Jun 17, 2026
Oct 17, 2023
N/A· v4
2.7 LOW· v3
N/A· v2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged att...Show more
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).Show less
1Softether
1Vpn
Jun 17, 2026
Oct 12, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service.
3Fedoraproject
Libxpm ProjectRedhat
3Enterprise Linux
FedoraLibxpm
Jun 17, 2026
Oct 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.
1Google
1Android
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed....Show more
In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Show less
1Google
1Android
Jun 17, 2026
Oct 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User...Show more
In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Show less
1Google
1Android
Jun 17, 2026
Oct 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no...Show more
In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Show less
1Google
1Android
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compr...Show more
In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Show less
1Google
1Android
Jun 17, 2026
Oct 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compr...Show more
In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Show less
1Google
1Android
Jun 17, 2026
Oct 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compr...Show more
In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Show less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.
1Gpac
1Gpac
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.7 HIGH· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
1Adobe
1Bridge
Jun 17, 2026
Oct 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...Show more
Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Keyence
2Kv Replay Viewer
Kv Studio
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed b...Show more
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file.Show less
1Microsoft
3Odbc Driver For Sql Server
Ole Db Driver For Sql ServerSql Server
Jun 17, 2026
Oct 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Microsoft SQL Server Denial of Service Vulnerability
1Microsoft
11Windows 10 1507
Windows 10 1607Windows 10 1809+8 more
Jun 17, 2026
Oct 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability