← Back
CWE-125

10,625 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,625)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
70Aqt1000 Firmware
Ar8035 FirmwareCsrb31024 Firmware+67 more
Jun 17, 2026
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
1Qualcomm
92Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+89 more
Jun 17, 2026
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IO...Show more
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
1Qualcomm
174Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+171 more
Jun 17, 2026
Jun 14, 2022
N/A· v4
9.1 CRITICAL· v3
9.4 HIGH· v2
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...Show more
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
1Qualcomm
171Aqt1000 Firmware
Ar8035 FirmwareAr9380 Firmware+168 more
Jun 17, 2026
Jun 14, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indus...Show more
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
1Fujielectric
2V Server
V Sft
Jun 17, 2026
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a use...Show more
Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.Show less
1Huawei
3Emui
HarmonyosMagic Ui
Jun 17, 2026
Jun 13, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
1Istio
1Istio
Jun 17, 2026
Jun 9, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior...Show more
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress Gateway exposed to external traffic. This vulnerability has been resolved in versions 1.12.8, 1.13.5, and 1.14.1. Users are advised to upgrade. There are no known workarounds for this issue.Show less
1Trendmicro
1Security
Jun 17, 2026
Jun 9, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Trend Micro Security 2022 and 2021 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to disclose sensitive information on an affected machine.
1Apache
1Http Server
Jun 17, 2026
Jun 9, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.
1Mi
1Miui
Jun 17, 2026
Jun 8, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit...Show more
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535950; Issue ID: ALPS06535950.Show less
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit...Show more
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545464; Issue ID: ALPS06545464.Show less
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478078; Issue ID: ALPS06478078.Show less
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479698; Issue ID: ALPS06479698.Show less
1Libmobi Project
1Libmobi
Jun 17, 2026
Jun 3, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
1Libdwarf Project
1Libdwarf
Jun 17, 2026
Jun 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.
1Jpeg
1Libjpeg
Jun 17, 2026
Jun 2, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
1Hornerautomation
1Cscape
Jun 17, 2026
Jun 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.
2Dell
Oracle
5Bsafe Micro Edition Suite
DatabaseHttp Server+2 more
Jun 17, 2026
Jun 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.
2Debian
Signalwire
2Debian Linux
Sofia Sip
Jun 17, 2026
May 31, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caus...Show more
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caused by `#define MATCH(s, m) (strncmp(s, m, n = sizeof(m) - 1) == 0)`, which will make `n` bigger and trigger out-of-bound access when `IS_NON_WS(s[n])`. Version 1.13.8 contains a patch for this issue.Show less