← Back
CWE-125

9,102 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,102)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jul 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclos...Show more
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.Show less
1Fast Cpp Csv Parser Project
1Fast Cpp Csv Parser
Nov 21, 2024
Jul 7, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information le...Show more
While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information leak can potentially occur.Show less
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can pot...Show more
While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur.Show less
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS f...Show more
While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.Show less
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
7.1 HIGH· v3
6.6 MEDIUM· v2
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking sour...Show more
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied.Show less
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android releases from CAF using the linux kernel (Android for MSM, F...Show more
Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.Show less
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Jun 17, 2026
Jul 6, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch leve...Show more
While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.Show less
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Jun 17, 2026
Jul 6, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the data_len value is received from firmware a...Show more
In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the data_len value is received from firmware and not properly validated which could potentially lead to an out-of-bounds access.Show less
1Google
1Android
Jun 17, 2026
Jul 6, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer over-read can potentially oc...Show more
In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer over-read can potentially occur.Show less
1Google
1Android
Nov 21, 2024
Jul 6, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0...Show more
A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.Show less
1Google
1Android
Nov 21, 2024
Jul 6, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_...Show more
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur.Show less
1Google
1Android
Nov 21, 2024
Jul 6, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in Android releases from C...Show more
While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.Show less
1Google
1Android
Nov 21, 2024
Jul 6, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM,...Show more
While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.Show less
5Canonical
DebianGnome+2 more
9Ansible Tower
Debian LinuxEnterprise Linux Desktop+6 more
Nov 21, 2024
Jul 5, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
1Ffmpeg
1Ffmpeg
Nov 21, 2024
Jul 5, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to...Show more
In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.Show less