← Back
CWE-125

10,619 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,619)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Huawei
3Emui
HarmonyosMagic Ui
Jun 17, 2026
Jan 3, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.
1Huawei
3Emui
HarmonyosMagic Ui
Jun 17, 2026
Jan 3, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
1Qualcomm
72Qca6390 Firmware
Qca6391 FirmwareQca6574 Firmware+69 more
Jun 17, 2026
Jan 3, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearable...Show more
Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon WearablesShow less
4Apple
DebianFedoraproject+1 more
5Debian Linux
FedoraMac Os X+2 more
Jun 17, 2026
Dec 31, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
vim is vulnerable to Out-of-bounds Read
3Fedoraproject
OracleWireshark
4Fedora
Http ServerWireshark+1 more
Jun 17, 2026
Dec 30, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
4Debian
FedoraprojectOracle+1 more
5Debian Linux
FedoraHttp Server+2 more
Jun 17, 2026
Dec 30, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
2Debian
Teluu
2Debian Linux
Pjsip
Jun 17, 2026
Dec 27, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially result...Show more
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.Show less
1Mediatek
7Mt7603e Firmware
Mt7613 FirmwareMt7615 Firmware+4 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).Show less
1Mediatek
7Mt7603e Firmware
Mt7613 FirmwareMt7615 Firmware+4 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).Show less
1Mediatek
7Mt7603e Firmware
Mt7613 FirmwareMt7615 Firmware+4 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).Show less
1Mediatek
7Mt7603e Firmware
Mt7613 FirmwareMt7615 Firmware+4 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).Show less
1Mediatek
10Mt7603e Firmware
Mt7610 FirmwareMt7612 Firmware+7 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).Show less
1Mediatek
10Mt7603e Firmware
Mt7610 FirmwareMt7612 Firmware+7 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 Affected Software Versions 7.4.0.0; Out-of-bounds read).Show less
1Mediatek
10Mt7603e Firmware
Mt7610 FirmwareMt7612 Firmware+7 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).Show less
1Mediatek
9Mt7603e Firmware
Mt7612 FirmwareMt7613 Firmware+6 more
Jun 17, 2026
Dec 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628...Show more
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).Show less
7Apple
DebianFedoraproject+4 more
8Debian Linux
Enterprise LinuxFactory+5 more
Oct 8, 2026
Dec 25, 2021
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
vim is vulnerable to Out-of-bounds Read
4Debian
FedoraprojectLinux+1 more
11Debian Linux
FedoraH300e Firmware+8 more
Jun 17, 2026
Dec 23, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry.
1Autodesk
13Advance Steel
AutocadAutocad Architecture+10 more
Jun 17, 2026
Dec 23, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.
2Debian
Teluu
2Debian Linux
Pjsip
Jun 17, 2026
Dec 22, 2021
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE messa...Show more
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against the actual received packet size, potentially resulting in an out-of-bound read access. This issue affects all users that use PJMEDIA and RTCP. A malicious actor can send a RTCP BYE message with an invalid reason length. Users are advised to upgrade as soon as possible. There are no known workarounds.Show less
1Opendesign
1Drawings Sdk
Jun 17, 2026
Dec 21, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TIF files. An unchecked input data from a crafted TIF fil...Show more
An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TIF files. An unchecked input data from a crafted TIF file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process.Show less