← Back
CWE-125

10,625 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,625)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Signalwire
2Debian Linux
Sofia Sip
Jun 17, 2026
May 31, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be ca...Show more
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with `%`. Version 1.13.8 contains a patch for this issue.Show less
3Apple
FedoraprojectVim
3Fedora
MacosVim
Jun 17, 2026
May 29, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
1Libmobi Project
1Libmobi
Jun 17, 2026
May 27, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
1Libmobi Project
1Libmobi
Jun 17, 2026
May 27, 2022
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execut...Show more
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
1Apple
1Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges.
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript b...Show more
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript...Show more
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.Show less
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS B...Show more
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.Show less
1Radare
1Radare2
Jun 17, 2026
May 26, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
1Inkscape
1Inkscape
Jun 17, 2026
May 18, 2022
N/A· v4
3.3 LOW· v3
3.5 LOW· v2
Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.
1Gpac
1Gpac
Jun 17, 2026
May 18, 2022
N/A· v4
7.1 HIGH· v3
4.0 MEDIUM· v2
GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.
1Ezxml Project
1Ezxml
Jun 17, 2026
May 17, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read.
1Nvidia
2Gpu Display Driver
Virtual Gpu
Jun 17, 2026
May 17, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information d...Show more
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure.Show less
3Apple
FedoraprojectVim
3Fedora
MacosVim
Jun 17, 2026
May 17, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
4Fedoraproject
NetappPcre+1 more
12Active Iq Unified Manager
Enterprise LinuxFedora+9 more
Jun 17, 2026
May 16, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused...Show more
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.Show less
5Debian
FedoraprojectNetapp+2 more
13Active Iq Unified Manager
Debian LinuxEnterprise Linux+10 more
Jun 17, 2026
May 16, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regul...Show more
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.Show less
1Accel Ppp
1Accel Ppp
Jun 17, 2026
May 16, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request.
1Adobe
1Framemaker
Jun 17, 2026
May 13, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less