← Back
CWE-125

10,628 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,628)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Jan 18, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...Show more
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Jan 18, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...Show more
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Dimension
Jun 17, 2026
Jan 18, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more
Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Foxit
2Pdf Editor
Pdf Reader
Jun 17, 2026
Jan 18, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.
2Arm
Trustedfirmware
2Trusted Firmware A
Trusted Firmware A
Jun 17, 2026
Jan 16, 2023
N/A· v4
7.4 HIGH· v3
N/A· v2
Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side ef...Show more
Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.Show less
1Adobe
1Incopy
Jun 17, 2026
Jan 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...Show more
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Indesign
Jun 17, 2026
Jan 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...Show more
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Indesign
Jun 17, 2026
Jan 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...Show more
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Amd
2Milanpi Firmware
Romepi Firmware
Jun 17, 2026
Jan 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.
1Microsoft
10Windows 10
Windows 11Windows 7+7 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Windows Kernel Information Disclosure Vulnerability
1Microsoft
15Windows 10 1607
Windows 10 1809Windows 10 20h2+12 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Kernel Elevation of Privilege Vulnerability
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Microsoft Office Visio Information Disclosure Vulnerability
1Microsoft
15Windows 10 1607
Windows 10 1809Windows 10 20h2+12 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
1Microsoft
6Windows 10 20h2
Windows 10 21h2Windows 10 22h2+3 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Authentication Remote Code Execution Vulnerability
1Microsoft
8Windows 10 1809
Windows 10 20h2Windows 10 21h2+5 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Event Tracing for Windows Information Disclosure Vulnerability
2Debian
Openvswitch
2Debian Linux
Openvswitch
Jun 17, 2026
Jan 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
2Debian
Openvswitch
2Debian Linux
Openvswitch
Jun 17, 2026
Jan 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
1Asus
1Rt Ax82u Firmware
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denia...Show more
A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.Show less
1Qualcomm
193Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+190 more
Jun 17, 2026
Jan 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure due to buffer overread in Core
1Qualcomm
160Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+157 more
Jun 17, 2026
Jan 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure due to buffer overread in Core