← Back
CWE-125

10,628 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,628)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1After Effects
Jun 17, 2026
Sep 7, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could l...Show more
Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Photoshop
Jun 17, 2026
Sep 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Photoshop version 22.5.1  and earlier versions   are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitiga...Show more
Adobe Photoshop version 22.5.1  and earlier versions   are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Premiere Pro
Jun 17, 2026
Sep 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Premiere Pro
Jun 17, 2026
Sep 7, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could le...Show more
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Premiere Pro
Jun 17, 2026
Sep 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensiti...Show more
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Media Encoder
Jun 17, 2026
Sep 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations suc...Show more
Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Apple
1Macos
Jun 17, 2026
Sep 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory.
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Sep 5, 2023
N/A· v4
8.1 HIGH· v3
N/A· v2
Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium...Show more
Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)Show less
1Gpac
1Gpac
Jun 17, 2026
Sep 5, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
1Lldpd Project
1Lldpd
Jun 17, 2026
Sep 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. Th...Show more
An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.Show less
1Qualcomm
66Csr8811 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+63 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN firmware while parsing MLO (multi-link operation).
1Qualcomm
190315 5g Firmware
Aqt1000 FirmwareAr8035 Firmware+187 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
1Qualcomm
4Qcs405 Firmware
Qcs605 FirmwareSd845 Firmware+1 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).
1Qualcomm
43Qca6390 Firmware
Qca6391 FirmwareQca6426 Firmware+40 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
1Qualcomm
38Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+35 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
1Qualcomm
45Aqt1000 Firmware
Qam8295p FirmwareQca6390 Firmware+42 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure in Automotive multimedia due to buffer over-read.
1Gpac
1Gpac
Jun 17, 2026
Sep 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more
In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: ALPS08044035.Show less
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more
In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: ALPS08044032.Show less