CWE-125
10,490 CVEs • Abstraction: Base
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CVEs (10,490)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox < 78. |
3Canonical MozillaOpensuse5Firefox Firefox EsrLeap+2 moreJun 17, 2026 Jul 9, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10...Show more |
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observab...Show more |
1Phoenixcontact 2Pc Worx Pc Worx ExpressJun 17, 2026 Jul 1, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due t...Show more |
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c. |
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c. |
2Debian Ntop2Debian Linux NdpiJun 17, 2026 Jul 1, 2020 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short. |
In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c. |
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the ta...Show more |
1Hmtalk 3Daoffice Dava+Daview IndyJun 17, 2026 Jun 30, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is...Show more |
2Fedoraproject Mediaarea2Fedora MediainfoJun 17, 2026 Jun 30, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). |
1Adobe 1Dng Software Development Kit Jun 17, 2026 Jun 26, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
1Adobe 1Dng Software Development Kit Jun 17, 2026 Jun 26, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
1Adobe 1Dng Software Development Kit Jun 17, 2026 Jun 26, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . |
1Adobe 1Digital Negative Software Development Kit Jun 17, 2026 Jun 26, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
1Adobe 1Digital Negative Software Development Kit Jun 17, 2026 Jun 26, 2020 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |