← Back
CWE-125

9,102 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,102)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 13, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 13, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 13, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
1Radare
1Radare2
Nov 21, 2024
Jul 12, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of m...Show more
The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of missing input validation in r_bin_java_line_number_table_attr_new.Show less
1Radare
1Radare2
Nov 21, 2024
Jul 12, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Mini Crash Dump file.
1Codeplea
1Genann
Nov 21, 2024
Jul 12, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Genann through 2018-07-08 has a stack-based buffer over-read in genann_train in genann.c.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 10, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in H5VM.c.
1Hdfgroup
1Hdf5
Mar 18, 2025
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocache.c.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
1Hdfgroup
1Hdf5
Nov 21, 2024
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_addr_decode_len in H5Fint.c.
1Axiosys
1Bento4
Nov 21, 2024
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue has been found in Bento4 1.5.1-624. AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532.
1Htslib
1Htslib
Nov 21, 2024
Jul 10, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
2Debian
Libgit2
2Debian Linux
Libgit2
Nov 21, 2024
Jul 10, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a...Show more
A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.Show less
2Debian
Libgit2
2Debian Linux
Libgit2
Nov 21, 2024
Jul 10, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bou...Show more
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.Show less
1Vmware
3Esxi
FusionWorkstation
Jun 17, 2026
Jul 9, 2018
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue...Show more
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966.Show less
1Vmware
3Esxi
FusionWorkstation
Jun 17, 2026
Jul 9, 2018
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue...Show more
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6967.Show less
1Vmware
3Esxi
FusionWorkstation
Jun 17, 2026
Jul 9, 2018
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue...Show more
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6966 and CVE-2018-6967.Show less
2Adobe
Redhat
5Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+2 more
Nov 21, 2024
Jul 9, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.