← Back
CWE-125

10,625 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,625)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mindspore
1Mindspore
Jun 17, 2026
Jun 27, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape whic...Show more
When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from heap buffers.Show less
1Mindspore
1Mindspore
Jun 17, 2026
Jun 27, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from...Show more
When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.Show less
2Fedoraproject
Vim
2Fedora
Vim
Oct 8, 2026
Jun 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
1Codesys
2Plcwinnt
Runtime Toolkit
Jun 17, 2026
Jun 24, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condi...Show more
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.Show less
1Codesys
2Plcwinnt
Runtime Toolkit
Jun 17, 2026
Jun 24, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.
2Fedoraproject
Vim
2Fedora
Vim
Oct 8, 2026
Jun 23, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
1Tinyexr Project
1Tinyexr
Jun 17, 2026
Jun 23, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
1Libdwarf Project
1Libdwarf
Jun 17, 2026
Jun 23, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.
2Fedoraproject
Vim
2Fedora
Vim
Oct 8, 2026
Jun 23, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
1Autodesk
1Autocad
Jun 17, 2026
Jun 21, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
Jun 20, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Oct 8, 2026
Jun 19, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Oct 8, 2026
Jun 19, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
1Ffmpeg
1Ffmpeg
Nov 21, 2024
Jun 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of t...Show more
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue.Show less
1Fast String Search Project
1Fast String Search
Jun 17, 2026
Jun 17, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously a...Show more
All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.Show less
1Adobe
1Incopy
Jun 17, 2026
Jun 16, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structur...Show more
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Autodesk
13ds Max
Jun 17, 2026
Jun 16, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to c...Show more
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Fujielectric
1V Server
Jun 17, 2026
Jun 16, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open...Show more
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.Show less
1Fujielectric
1Monitouch V Sft
Jun 17, 2026
Jun 16, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by havin...Show more
Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.Show less
1Adobe
1Illustrator
Jun 17, 2026
Jun 15, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabilit...Show more
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less