← Back
CWE-125

9,134 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,134)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-16228
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2018-16227
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-14882
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-14881
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
CVE-2018-14880
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14470
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
CVE-2018-14469
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
CVE-2018-14468
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2018-14467
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
CVE-2018-14466
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
CVE-2018-14465
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 17, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
CVE-2018-14464
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
CVE-2018-14463
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
CVE-2018-14462
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
CVE-2018-14461
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
CVE-2019-3728
1Dell
3Bsafe Crypto C
Bsafe Crypto C Micro EditionBsafe Micro Edition Suite
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from...Show more
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.Show less
CVE-2019-10507
1Qualcomm
35Mdm9150 Firmware
Mdm9206 FirmwareMdm9607 Firmware+32 more
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...Show more
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24Show less
CVE-2019-17040
1Rsyslog
1Rsyslog
Jun 17, 2026
Sep 30, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
CVE-2019-9462
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploi...Show more
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-91544774Show less
CVE-2019-9435
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for explo...Show more
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682Show less