← Back
CWE-125

10,487 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,487)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-14468
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2018-14467
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
CVE-2018-14466
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
CVE-2018-14465
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 17, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
CVE-2018-14464
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
CVE-2018-14463
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
CVE-2018-14462
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
CVE-2018-14461
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
CVE-2019-3728
1Dell
3Bsafe Crypto C
Bsafe Crypto C Micro EditionBsafe Micro Edition Suite
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from...Show more
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.Show less
CVE-2019-10507
1Qualcomm
35Mdm9150 Firmware
Mdm9206 FirmwareMdm9607 Firmware+32 more
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...Show more
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24Show less
CVE-2019-17040
1Rsyslog
1Rsyslog
Jun 17, 2026
Sep 30, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
CVE-2019-9462
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploi...Show more
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-91544774Show less
CVE-2019-9435
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for explo...Show more
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682Show less
CVE-2019-9434
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User...Show more
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80432895Show less
CVE-2019-9432
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interac...Show more
In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80546108Show less
CVE-2019-9431
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User intera...Show more
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109755179Show less
CVE-2019-9425
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitat...Show more
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110846194Show less
CVE-2019-9422
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for expl...Show more
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111214766Show less
CVE-2019-9421
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
5.0 MEDIUM· v3
1.9 LOW· v2
In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Produ...Show more
In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215250Show less
CVE-2019-9420
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Prod...Show more
In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481Show less