← Back
CWE-125

9,170 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,170)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
4.4 MEDIUM· v3
3.6 LOW· v2
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: A...Show more
In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206039140References: N/AShow less
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. Use...Show more
In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204421047References: N/AShow less
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android ID: A-205097028
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction...Show more
In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-204445255Show less
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.5 MEDIUM· v3
1.9 LOW· v2
In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privil...Show more
In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029Show less
1Schneider Electric
1Interactive Graphical Scada System Data Server
Jun 17, 2026
Feb 9, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0...Show more
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)Show less
1Schneider Electric
1Interactive Graphical Scada System Data Server
Jun 17, 2026
Feb 9, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Gra...Show more
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)Show less
1Intel
1Trace Analyzer And Collector
Jun 17, 2026
Feb 9, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access.
1Intel
1Trace Analyzer And Collector
Jun 17, 2026
Feb 9, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access.
1Google
1Android
Jun 17, 2026
Feb 9, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for explo...Show more
In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862973; Issue ID: ALPS05862973.Show less
1Google
1Android
Jun 17, 2026
Feb 9, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit...Show more
In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05747150; Issue ID: ALPS05747150.Show less
2Debian
Htmldoc Project
2Debian Linux
Htmldoc
Jun 17, 2026
Feb 9, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).
1Intel
25Atom P5921b Firmware
Atom P5931b FirmwareAtom P5942b Firmware+22 more
Jun 17, 2026
Feb 9, 2022
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via...Show more
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.Show less
1Intel
2Core I5 8305g Firmware
Core I7 8706g Firmware
Jun 17, 2026
Feb 9, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an authenticated user to potentially enable information disclosure via local access.
2Intel
Netapp
681Atom C3308 Firmware
Atom C3336 FirmwareAtom C3338 Firmware+678 more
Jun 17, 2026
Feb 9, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
1Siemens
3Jt2go
Solid EdgeTeamcenter Visualization
Jun 17, 2026
Feb 9, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0....Show more
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15112)Show less
1Mruby
1Mruby
Jun 17, 2026
Feb 9, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Out-of-bounds Read in Homebrew mruby prior to 3.2.
1Trendmicro
1Worry Free Business Security
Jun 17, 2026
Feb 4, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Pleas...Show more
A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.Show less
1Google
1Tensorflow
Jun 17, 2026
Feb 4, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef` before converting it to the MLIR-based dialect. If an attacker changes...Show more
Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef` before converting it to the MLIR-based dialect. If an attacker changes the `SavedModel` format on disk to invalidate these assumptions and the `GraphDef` is then converted to MLIR-based IR then they can cause a crash in the Python interpreter. Under certain scenarios, heap OOB read/writes are possible. These issues have been discovered via fuzzing and it is possible that more weaknesses exist. We will patch them as they are discovered.Show less