CWE-125 · Out-of-bounds Read (page 18)
Page 18 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38395 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is suppo… |
CVE-2025-38391 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implement… |
CVE-2025-38375 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_pa… |
CVE-2025-5042 | High | 7.8 | 2025-07-22 | A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerab… |
CVE-2025-7324 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7322 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7319 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7312 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7298 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7291 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7279 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7275 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7273 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7269 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7268 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7267 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7265 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7264 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7263 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7262 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7261 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7252 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7251 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7250 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7247 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7242 | High | 7.8 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2025-7233 | Medium | 5.5 | 2025-07-21 | IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sens… |
CVE-2025-54070 | | 2025-07-17 | OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 5.2.0 and prior to version 5.4.0, the `lastIndexOf(bytes,byte,ui… | |
CVE-2025-0831 | High | 7.8 | 2025-07-15 | Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could a… |
CVE-2025-53019 | Low | 3.7 | 2025-07-14 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `ma… |
CVE-2025-53014 | Low | 3.7 | 2025-07-14 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overf… |
CVE-2024-42646 | High | 7.5 | 2025-07-14 | A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service (DoS) via crafted messages. |
CVE-2025-7464 | Low | 3.7 | 2025-07-12 | A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The m… |
CVE-2025-38342 | High | 7.0 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_ge… |
CVE-2025-38340 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test KASAN reported out of bounds a… |
CVE-2025-38330 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out… |
CVE-2025-38329 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) KASAN reported out… |
CVE-2025-38320 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() KASAN reports a… |
CVE-2025-38292 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetch… |
CVE-2025-38286 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that g… |
CVE-2025-38249 | High | 7.1 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() In snd_usb_get_… |
CVE-2025-49525 | Medium | 5.5 | 2025-07-08 | Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploita… |
CVE-2025-30313 | Medium | 5.5 | 2025-07-08 | Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploita… |
CVE-2025-27165 | Medium | 5.5 | 2025-07-08 | Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploita… |
CVE-2025-43584 | Medium | 5.5 | 2025-07-08 | Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitat… |
CVE-2025-47135 | Medium | 5.5 | 2025-07-08 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could l… |
CVE-2025-49696 | High | 8.4 | 2025-07-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-49689 | High | 7.8 | 2025-07-08 | Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-49687 | High | 8.8 | 2025-07-08 | Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
CVE-2025-49681 | Medium | 6.5 | 2025-07-08 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-49671 | Medium | 6.5 | 2025-07-08 | Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose info… |
CVE-2025-49658 | Medium | 5.5 | 2025-07-08 | Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally. |
CVE-2025-49657 | High | 8.8 | 2025-07-08 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
CVE-2025-48822 | High | 8.6 | 2025-07-08 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
CVE-2025-48816 | High | 7.8 | 2025-07-08 | Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-48812 | Medium | 5.5 | 2025-07-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2025-48002 | Medium | 5.7 | 2025-07-08 | Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network. |
CVE-2025-47996 | High | 7.8 | 2025-07-08 | Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-47978 | Medium | 6.5 | 2025-07-08 | Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
CVE-2025-43587 | Medium | 5.5 | 2025-07-08 | After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-21168 | Medium | 5.5 | 2025-07-08 | Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2025-21167 | Medium | 5.5 | 2025-07-08 | Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2025-27057 | High | 7.5 | 2025-07-08 | Transient DOS while handling beacon frames with invalid IE header length. |
CVE-2025-27055 | High | 7.8 | 2025-07-08 | Memory corruption during the image encoding process. |
CVE-2025-21454 | High | 7.5 | 2025-07-08 | Transient DOS while processing received beacon frame. |
CVE-2025-21449 | High | 7.5 | 2025-07-08 | Transient DOS may occur while processing malformed length field in SSID IEs. |
CVE-2025-21446 | High | 7.5 | 2025-07-08 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
CVE-2025-21427 | High | 8.2 | 2025-07-08 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
CVE-2025-40740 | High | 7.8 | 2025-07-08 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end… |
CVE-2025-40739 | High | 7.8 | 2025-07-08 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end… |
CVE-2025-21009 | Medium | 5.5 | 2025-07-08 | Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-21008 | Medium | 5.5 | 2025-07-08 | Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-20693 | Medium | 6.5 | 2025-07-08 | In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosu… |
CVE-2025-20692 | Medium | 5.5 | 2025-07-08 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution… |
CVE-2025-20691 | Medium | 5.5 | 2025-07-08 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution… |
CVE-2025-20690 | Medium | 5.5 | 2025-07-08 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution… |
CVE-2025-20689 | Medium | 5.5 | 2025-07-08 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution… |
CVE-2025-20688 | Medium | 5.5 | 2025-07-08 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution… |
CVE-2025-20687 | Medium | 5.5 | 2025-07-08 | In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution pr… |
CVE-2024-25178 | Critical | 9.1 | 2025-07-07 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c. |
CVE-2025-49601 | Medium | 4.8 | 2025-07-04 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a… |
CVE-2025-38224 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: can: kvaser_pciefd: refine error prone echo_skb_max handling logic echo_skb_max should de… |
CVE-2025-38221 | High | 7.1 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out of bounds punch offset Punching a hole with a start offset that exceeds max… |
CVE-2025-38204 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is s8 but it must con… |
CVE-2025-53367 | | 2025-07-03 | DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method… | |
CVE-2025-38159 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6… |
CVE-2025-38153 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot… |
CVE-2025-38139 | Critical | 9.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting o… |
CVE-2025-38111 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available… |
CVE-2025-38110 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly… |
CVE-2025-38103 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Update struct hid_de… |
CVE-2025-49480 | High | 7.4 | 2025-07-01 | Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects F… |
CVE-2025-38088 | High | 7.1 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue ha… |
CVE-2025-53074 | Critical | 9.1 | 2025-06-30 | Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. |
CVE-2025-6662 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2025-6658 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2025-6657 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2025-6656 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2025-6655 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2025-6653 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |