← Back
CWE-125

10,490 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,490)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor...Show more
In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638492Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execut...Show more
In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638392Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution p...Show more
In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546561Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privi...Show more
In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544079Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges...Show more
In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543497Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with S...Show more
In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145597277Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction...Show more
In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146435761Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User intera...Show more
In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146053215Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution...Show more
In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145520471Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed....Show more
In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139473816Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is...Show more
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privilege...Show more
In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140054506Show less
1Google
1Android
Jun 17, 2026
Jun 10, 2020
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interac...Show more
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913Show less
1Microsoft
3365 Apps
OfficeProject
Jun 17, 2026
Jun 9, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.
1Microsoft
3Windows 10
Windows Server 2016Windows Server 2019
Jun 17, 2026
Jun 9, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.
1Apple
1Mac Os X
Jun 17, 2026
Jun 9, 2020
N/A· v4
8.6 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break out of its sandbox.
1Apple
2Ipados
Iphone Os
Jun 17, 2026
Jun 9, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to cause arbitrary code execution.
1Apple
4Ipados
Iphone OsMac Os X+1 more
Jun 17, 2026
Jun 9, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remote attacker may be able to leak memory.
1Apple
1Mac Os X
Jun 17, 2026
Jun 9, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determine kernel memory layout.
1Apple
1Mac Os X
Jun 17, 2026
Jun 9, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determine kernel memory layout.