← Back
CWE-125

9,102 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,102)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jul 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jul 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jul 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jul 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jul 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 20, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
1Linuxsampler
1Libgig
Nov 21, 2024
Jul 20, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.
1Linuxsampler
1Libgig
Nov 21, 2024
Jul 20, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first dimension region of this region" feature of the function gig::Region::UpdateChunks in gig.cpp.
1Linuxsampler
1Libgig
Nov 21, 2024
Jul 20, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" feature of the function gig::Region::UpdateChunks in gig.cpp.
1Linuxsampler
1Libgig
Nov 21, 2024
Jul 20, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp.
2Debian
Libconfuse Project
2Debian Linux
Libconfuse
Nov 21, 2024
Jul 20, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
1Libdxfrw Project
1Libdxfrw
Nov 21, 2024
Jul 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash.
1Axml Parser Project
1Axml Parser
Nov 21, 2024
Jul 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read.
1Wireshark
1Wireshark
Nov 21, 2024
Jul 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.
1Wireshark
1Wireshark
Nov 21, 2024
Jul 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.
2Debian
Wireshark
2Debian Linux
Wireshark
Nov 21, 2024
Jul 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read...Show more
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.Show less
4Canonical
DebianLinux+1 more
4Debian Linux
Enterprise LinuxLinux Kernel+1 more
Nov 21, 2024
Jul 18, 2018
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image.
1Exiv2
1Exiv2
Nov 21, 2024
Jul 13, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
1Vmware
1Tools
Jun 17, 2026
Jul 13, 2018
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileg...Show more
VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.Show less
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 13, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.