← Back
CWE-125

10,566 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,566)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Debian
LinuxOracle+1 more
6Communications Cloud Native Core Binding Support Function
Communications Cloud Native Core Network Exposure FunctionCommunications Cloud Native Core Policy+3 more
Jun 17, 2026
Nov 4, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.
2Debian
Htmldoc Project
2Debian Linux
Htmldoc
Jun 17, 2026
Nov 3, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
1Google
1Angle
Jun 17, 2026
Nov 2, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page.
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Libjxl Project
1Libjxl
Jun 17, 2026
Nov 1, 2021
N/A· v4
4.4 MEDIUM· v3
3.6 LOW· v2
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other proces...Show more
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/757Show less
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Oct 28, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose rest...Show more
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.Show less
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Oct 28, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory.
1Apple
1Macos
Jun 17, 2026
Oct 28, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory.
1Huawei
2Emui
Magic Ui
Jun 17, 2026
Oct 28, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability.
1Huawei
2Emui
Magic Ui
Jun 17, 2026
Oct 28, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.
1Huawei
1Harmonyos
Jun 17, 2026
Oct 28, 2021
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read.
1Huawei
1Harmonyos
Jun 17, 2026
Oct 28, 2021
N/A· v4
3.3 LOW· v3
4.6 MEDIUM· v2
A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart.
1Huawei
1Harmonyos
Jun 17, 2026
Oct 28, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vulnerability to cause arbitrary code execution.
1Huawei
1Harmonyos
Jun 17, 2026
Oct 28, 2021
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
1Google
1Android
Jun 17, 2026
Oct 25, 2021
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed...Show more
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernelShow less
1Google
1Android
Jun 17, 2026
Oct 25, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction i...Show more
In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186026549References: N/AShow less
1Google
1Android
Jun 17, 2026
Oct 25, 2021
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker under certain build conditions with no additional execution pr...Show more
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker under certain build conditions with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05560246; Issue ID: ALPS05551383.Show less
1Google
1Android
Jun 17, 2026
Oct 25, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation....Show more
In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551435; Issue ID: ALPS05551435.Show less
1Google
1Android
Jun 17, 2026
Oct 25, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for e...Show more
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561394; Issue ID: ALPS05561394.Show less
1Google
1Android
Jun 17, 2026
Oct 25, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for e...Show more
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391.Show less