← Back
CWE-125

10,437 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,437)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Sep 14, 2026
Sep 9, 2026
8.8 HIGH· v4
8.2 HIGH· v3
N/A· v2
zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read nat...Show more
zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashes.Show less
-
-
Sep 14, 2026
Sep 9, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
-
-
Sep 9, 2026
Sep 9, 2026
N/A· v4
5.9 MEDIUM· v3
N/A· v2
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
-
-
Sep 9, 2026
Sep 9, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium...Show more
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C...Show more
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Sep 9, 2026
Sep 9, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
2.7 LOW· v3
N/A· v2
Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)
1Google
1Chrome
Sep 10, 2026
Sep 9, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
3.3 LOW· v3
N/A· v2
A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.
-
-
Sep 14, 2026
Sep 8, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-...Show more
A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during decompression. This can lead to a denial of service, where the application crashes, or to information disclosure, potentially revealing sensitive data from adjacent memory.Show less
1Adobe
3Acrobat
Acrobat DcAcrobat Reader Dc
Sep 10, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this i...Show more
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
3Acrobat
Acrobat DcAcrobat Reader Dc
Sep 11, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this i...Show more
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
3Acrobat
Acrobat DcAcrobat Reader Dc
Sep 10, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this i...Show more
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
3Acrobat
Acrobat DcAcrobat Reader Dc
Sep 10, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this i...Show more
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
3Acrobat
Acrobat DcAcrobat Reader Dc
Sep 10, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this i...Show more
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less