CWE-125
10,490 CVEs • Abstraction: Base
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CVEs (10,490)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution. |
Adobe Bridge versions 10.0.3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution. |
3Canonical DebianLuajit3Debian Linux LuajitUbuntu LinuxJun 17, 2026 Jul 21, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled. |
Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members. |
Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free. |
Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c. |
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec. |
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011. |
1Trendmicro 4Antivirus+ 2020 Internet Security 2020Maximum Security 2020+1 moreJun 17, 2026 Jul 15, 2020 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with...Show more |
2Opensuse Oracle2Leap Vm VirtualboxJun 17, 2026 Jul 15, 2020 N/A· v4 5.3 MEDIUM· v3 4.7 MEDIUM· v2 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerabil...Show more |
2Opensuse Oracle2Leap Vm VirtualboxJun 17, 2026 Jul 15, 2020 N/A· v4 5.3 MEDIUM· v3 4.7 MEDIUM· v2 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerabil...Show more |
2Opensuse Oracle2Leap Vm VirtualboxJun 17, 2026 Jul 15, 2020 N/A· v4 5.3 MEDIUM· v3 4.7 MEDIUM· v2 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerabil...Show more |
2Opensuse Oracle2Leap Vm VirtualboxJun 17, 2026 Jul 15, 2020 N/A· v4 5.3 MEDIUM· v3 4.7 MEDIUM· v2 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerabil...Show more |
2Opensuse Oracle2Leap Vm VirtualboxJun 17, 2026 Jul 15, 2020 N/A· v4 7.5 HIGH· v3 4.4 MEDIUM· v2 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerabil...Show more |
Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001. |
1Microsoft 7365 Apps OfficeOffice Online Server+4 moreJun 17, 2026 Jul 14, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Dis...Show more |
1Siemens 3Sicam Mmu Firmware Sicam Sgu FirmwareSicam T FirmwareJun 17, 2026 Jul 14, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker might be able to gain...Show more |
1Yubico 3Libykpiv Piv Tool ManagerYubikey Smart Card MinidriverJun 17, 2026 Jul 9, 2020 N/A· v4 4.3 MEDIUM· v3 1.9 LOW· v2 An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. A malicious PIV token...Show more |
5Canonical DebianLibslirp Project+2 more6Debian Linux Enterprise LinuxLeap+3 moreJun 17, 2026 Jul 9, 2020 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping...Show more |