← Back
CWE-125

10,490 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,490)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.3 MEDIUM· v3
3.3 LOW· v2
The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.
1Treck
1Tcp/ip
Jun 17, 2026
Jun 17, 2020
N/A· v4
9.0 CRITICAL· v3
9.3 HIGH· v2
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
2Dell
Treck
4Tcp/ip
Wyse 5030 FirmwareWyse 5050 All In One Firmware+1 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.4 MEDIUM· v3
4.8 MEDIUM· v2
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 15, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before...Show more
An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation, as demonstrated by improper read access to memory in ecma_gc_set_object_visited in ecma/base/ecma-gc.c.Show less
3Barton
DebianFedoraproject
3Debian Linux
FedoraNgircd
Jun 17, 2026
Jun 15, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
1Ijg
1Libjpeg
Jun 17, 2026
Jun 15, 2020
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers.
3Apple
PcreSplunk
3Macos
PcreUniversal Forwarder
Oct 8, 2026
Jun 15, 2020
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
1Intel
2Active Management Technology Firmware
Service Manager
Jun 17, 2026
Jun 15, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via n...Show more
Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access.Show less
1Intel
2Active Management Technology Firmware
Software Manager
Jun 17, 2026
Jun 15, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.
1Intel
2Active Management Technology Firmware
Service Manager
Jun 17, 2026
Jun 15, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network ac...Show more
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.Show less
1Morganstanley
1Hobbes
Jun 17, 2026
Jun 12, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnerability that leads to both local and remote code (via RPC) exe...Show more
In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnerability that leads to both local and remote code (via RPC) execution.Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. Us...Show more
In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140292264Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User inter...Show more
In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135140854Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. Use...Show more
In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147491773Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is...Show more
In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135532289Show less