CWE-125
9,136 CVEs • Abstraction: Base
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CVEs (9,136)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
6Apple CanonicalDebian+3 more12Debian Linux FedoraIcloud+9 moreJun 17, 2026 Apr 14, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp. |
6Apple CanonicalDebian+3 more12Debian Linux FedoraIcloud+9 moreJun 17, 2026 Apr 14, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case. |
5Apple CanonicalDebian+2 more11Debian Linux FedoraIcloud+8 moreJun 17, 2026 Apr 14, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. |
6Apple CanonicalDebian+3 more12Debian Linux FedoraIcloud+9 moreJun 17, 2026 Apr 14, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. |
6Apple CanonicalDebian+3 more12Debian Linux FedoraIcloud+9 moreJun 17, 2026 Apr 14, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. |
4Debian FedoraprojectGoogle+1 more5Backports ChromeDebian Linux+2 moreJun 17, 2026 Apr 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
4Debian FedoraprojectGoogle+1 more5Backports Sle ChromeDebian Linux+2 moreJun 17, 2026 Apr 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page. |
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos chipsets) software. A kernel driver allows out-of-bounds Read/Write operations and possibly arbitrary code execution. The Samsung...Show more |
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 (April 2020). |
An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. There is an information disclosure (of memory locations outside a buffer) via /dev/dsm_ctrl_dev. The Samsung ID is SVE-2016-7340...Show more |
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer over-read in a trustlet. The Samsung ID is SVE-2017-8890 (August 2017). |
4Canonical FedoraprojectLinux+1 more278300 Firmware 8700 FirmwareA220 Firmware+24 moreJun 17, 2026 Apr 2, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerabi...Show more |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory. |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory. |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory. |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory. |
5Canonical DebianOpensuse+2 more5Debian Linux LeapPhp+2 moreJun 17, 2026 Apr 1, 2020 N/A· v4 5.4 MEDIUM· v3 5.8 MEDIUM· v2 In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory...Show more |
2Canonical Mozilla4Firefox Firefox EsrThunderbird+1 moreJun 17, 2026 Mar 25, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. This could have led to memory corruption and a potentially exploitable cr...Show more |
1Adobe 2Photoshop 2020 Photoshop CcJun 17, 2026 Mar 25, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
1Adobe 2Photoshop 2020 Photoshop CcJun 17, 2026 Mar 25, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |