CWE-125
10,490 CVEs • Abstraction: Base
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CVEs (10,490)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. |
jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. |
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. |
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. |
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. |
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. |
2Gnu Opensuse3Backports Sle LeapLibredwgJun 17, 2026 Jan 8, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. |
2Gnu Opensuse3Backports Sle LeapLibredwgJun 17, 2026 Jan 8, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. |
2Gnu Opensuse3Backports Sle LeapLibredwgJun 17, 2026 Jan 8, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. |
2Gnu Opensuse3Backports Sle LeapLibredwgJun 17, 2026 Jan 8, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. |
In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges need...Show more |
4Canonical DebianFreedesktop+1 more4Debian Linux LeapLibbsd+1 moreOct 14, 2026 Jan 8, 2020 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab). |
2Libsdl Redhat2Enterprise Linux Simple Directmedia LayerJun 17, 2026 Jan 7, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-base...Show more |
In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c. |
4Canonical DebianFedoraproject+1 more4Debian Linux FedoraPillow+1 moreJun 17, 2026 Jan 3, 2020 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. |
ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c. |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endin...Show more |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen() on a NULL...Show more |
2Linux Opensuse2Leap Linux KernelJun 17, 2026 Dec 31, 2019 N/A· v4 6.0 MEDIUM· v3 3.6 LOW· v2 In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages...Show more |
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol. |