CWE-125 · Out-of-bounds Read

9315 CVEs classified under CWE-125 (Out-of-bounds Read). Browse by severity and year.

Top CVEs for CWE-125
CVESeverityScorePublishedSummary
CVE-2024-22004Critical10.02024-04-05Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Tr…
CVE-2021-41556Critical10.02022-07-28sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim e…
CVE-2021-21777Critical10.02021-06-17An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A spe…
CVE-2017-14451Critical10.02020-12-02An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause…
CVE-2026-33642Critical9.92026-05-19Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validatio…
CVE-2026-34987Critical9.92026-04-09Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may al…
CVE-2023-28445Critical9.92023-03-24Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk duri…
CVE-2023-26489Critical9.92023-03-08wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mod…
CVE-2026-71256Critical9.82026-08-05nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identification_basic / recv_read_device_ide…
CVE-2026-64762Critical9.82026-07-27An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14…
CVE-2026-43809Critical9.82026-07-27An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14…
CVE-2026-43773Critical9.82026-07-27An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting…
CVE-2026-43757Critical9.82026-07-27An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14…
CVE-2026-59147Critical9.82026-07-21Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. The attach-time vali…
CVE-2026-64102Critical9.82026-07-19In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connect…
CVE-2025-15646Critical9.82026-07-01HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the <template> element was added to libgumbo 0.10.0 in 2015, bu…
CVE-2026-52955Critical9.82026-06-24In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crush_decode() A message of type CEPH_MSG_…
CVE-2026-29013Critical9.82026-04-17libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely…
CVE-2026-5735Critical9.82026-04-07Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough…
CVE-2026-31405Critical9.82026-04-06In the Linux kernel, the following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ule_mandatory_ext_handl…
All CVEs classified under CWE-125 — newest first (page 1 of 94)
CVESeverityScorePublishedSummary
CVE-2026-75090Medium4.32026-08-18A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs…
CVE-2026-65832High8.22026-08-17Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions (DSOP) va…
CVE-2026-63409High8.22026-08-17Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to…
CVE-2026-74238High7.52026-08-17TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote attackers t…
CVE-2026-71980High7.52026-08-17Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDframe() function in src/cng.c that allows unauthent…
CVE-2026-12630Medium4.32026-08-17Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds read in get_ihpc_inlined_size() (subsys/net/ip/6lo.c). The destinati…
CVE-2026-401442026-08-17A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2…
CVE-2026-19955Low3.52026-08-16A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results…
CVE-2026-49282Medium5.12026-08-14Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to…
CVE-2026-18020Medium5.32026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking.
CVE-2026-17649Medium5.32026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-17226Medium5.42026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds r…
CVE-2026-17212Medium5.32026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16878Medium5.42026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16861Medium5.32026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16859Medium5.32026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16853Medium6.52026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-554022026-08-13CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send sp…
CVE-2026-73515High8.12026-08-13PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malfor…
CVE-2026-14256Medium4.72026-08-13ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated…
CVE-2026-73583Medium6.62026-08-13A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-…
CVE-2026-17485High8.22026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow.
CVE-2026-19654High7.52026-08-12A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery c…
CVE-2026-73434Medium6.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries i…
CVE-2026-19643Medium5.32026-08-12An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an…
CVE-2026-16863High7.72026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-12232Medium6.12026-08-12The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a caller-supplied int stream_id with no rang…
CVE-2026-18694High7.12026-08-11An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be…
CVE-2026-18688High7.12026-08-11An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed nu…
CVE-2026-70328Medium6.52026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327Medium6.52026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70315Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70310Medium5.52026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-68814High7.82026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68813Medium5.52026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68808Medium5.52026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68802Medium5.52026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68797Medium5.52026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68793High7.82026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-66809Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66806Medium5.52026-08-11Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-65787High7.82026-08-11Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65786High7.82026-08-11Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65784Medium5.52026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65662Medium5.52026-08-11Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-64917Medium5.52026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64909High7.82026-08-11Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64899Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63531Medium5.52026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530Medium5.52026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63528Medium5.52026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63524Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63521Medium5.52026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63517Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63515High7.82026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62887Medium5.52026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62880High7.82026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62876High7.82026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62842Medium5.52026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62814Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62796Medium5.52026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62786Medium5.52026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62782Medium6.52026-08-11Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-62745Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62743Medium5.52026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62742Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62738Medium5.52026-08-11Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-62733High7.82026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62728High7.02026-08-11Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62720Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62718Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62716Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62715Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62714Medium6.52026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62703Medium5.52026-08-11Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-61933Medium5.52026-08-11Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-61924Medium6.52026-08-11Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61921Medium6.52026-08-11Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61918Medium6.52026-08-11Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-59128Medium5.52026-08-11Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-207862026-08-11Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary…
CVE-2026-207782026-08-11Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adver…
CVE-2026-207492026-08-11Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with a…
CVE-2026-730752026-08-11Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a…
CVE-2026-730672026-08-11Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_daw…
CVE-2026-18125High7.52026-08-11An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.
CVE-2026-17535Medium6.22026-08-11Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typi…
CVE-2026-64629High7.82026-08-11A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contai…
CVE-2026-59701High7.82026-08-11A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability whil…
CVE-2026-59700High7.82026-08-11A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability whil…
CVE-2026-50063High7.82026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap…
CVE-2026-50062High7.82026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap…
CVE-2026-50058High7.82026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap…
CVE-2026-11809Low3.72026-08-10The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe(). The probe resp…
CVE-2026-72522Medium6.22026-08-10libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode proce…
CVE-2026-15534Medium5.72026-08-09Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. Th…
CVE-2026-11743Medium6.62026-08-07The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated the flash offset and length on its read and write paths with the tes…
CVE-2026-66151Medium5.52026-08-07SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a…
CVE-2026-65819High7.52026-08-07gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets bef…