CWE-125 · Out-of-bounds Read (page 19)
Page 19 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-21278 | Medium | 5.5 | 2026-01-13 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could le… |
CVE-2026-20946 | High | 7.8 | 2026-01-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-20944 | High | 8.4 | 2026-01-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-20936 | Medium | 4.3 | 2026-01-13 | Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack. |
CVE-2026-20851 | Medium | 6.2 | 2026-01-13 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally. |
CVE-2026-20835 | Medium | 5.5 | 2026-01-13 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally. |
CVE-2026-20829 | Medium | 5.5 | 2026-01-13 | Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. |
CVE-2026-20828 | Medium | 4.6 | 2026-01-13 | Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2025-71101 | High | 7.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hp_p… |
CVE-2025-71093 | Critical | 9.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000_tbi_should_accept() In e1000_tbi_should_accept() we read the last… |
CVE-2025-69992 | Critical | 9.8 | 2026-01-13 | phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identit… |
CVE-2026-22801 | Medium | 6.8 | 2026-01-12 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6… |
CVE-2026-22695 | Medium | 6.1 | 2026-01-12 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6… |
CVE-2025-15506 | Low | 3.3 | 2026-01-11 | A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertToRegularExpression of the file src/Open… |
CVE-2025-53470 | Low | 3.1 | 2026-01-10 | Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affec… |
CVE-2026-22023 | High | 7.5 | 2026-01-10 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2026-21900 | Medium | 5.9 | 2026-01-10 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2026-21899 | Medium | 4.7 | 2026-01-10 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2026-21898 | High | 8.2 | 2026-01-10 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2025-67810 | Medium | 6.5 | 2026-01-09 | In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the s… |
CVE-2026-20973 | Medium | 5.3 | 2026-01-09 | Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory. |
CVE-2025-69260 | High | 7.5 | 2026-01-08 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected instal… |
CVE-2026-22185 | | 2026-01-07 | OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline(… | |
CVE-2026-21678 | High | 7.8 | 2026-01-07 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2… |
CVE-2026-21494 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2026-21491 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2026-21490 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2025-15382 | High | 8.1 | 2026-01-06 | A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted… |
CVE-2026-21489 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have Out-of-bounds Read and Integer Und… |
CVE-2026-21488 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, H… |
CVE-2026-21487 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-… |
CVE-2026-21485 | High | 8.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (U… |
CVE-2025-10933 | | 2026-01-05 | An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads. | |
CVE-2025-52871 | Medium | 6.5 | 2026-01-02 | An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerabil… |
CVE-2025-54166 | Medium | 4.9 | 2026-01-02 | An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, th… |
CVE-2025-54165 | Medium | 4.9 | 2026-01-02 | An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, th… |
CVE-2025-54164 | Medium | 4.9 | 2026-01-02 | An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, th… |
CVE-2025-15412 | Medium | 5.3 | 2026-01-01 | A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/w… |
CVE-2025-68431 | Medium | 6.5 | 2025-12-29 | libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap… |
CVE-2025-14177 | High | 7.5 | 2025-12-27 | In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak un… |
CVE-2025-14421 | Medium | 5.5 | 2025-12-23 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… |
CVE-2025-14411 | Medium | 5.5 | 2025-12-23 | Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2025-14410 | Medium | 5.5 | 2025-12-23 | Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2025-14408 | Low | 3.3 | 2025-12-23 | Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2025-14401 | High | 7.8 | 2025-12-23 | PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2025-14956 | Medium | 5.3 | 2025-12-19 | A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm… |
CVE-2025-66498 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing U3D data. When open… |
CVE-2025-66497 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When open… |
CVE-2025-66496 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When open… |
CVE-2025-68382 | Medium | 6.5 | 2025-12-18 | Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a de… |
CVE-2025-65568 | High | 7.5 | 2025-12-18 | A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP S… |
CVE-2025-65567 | High | 7.5 | 2025-12-18 | A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a specia… |
CVE-2025-64467 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result i… |
CVE-2025-64466 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI file. This vulnerability may result in… |
CVE-2025-64465 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This vulnerability may result in informatio… |
CVE-2025-64464 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in lvre!VisaWriteFromFile() when parsing a corrupted VI file. This vulnerability may result in info… |
CVE-2025-64463 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in LVResource::DetachResource() when parsing a corrupted VI file. This vulnerability may result in… |
CVE-2025-64462 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::RGetMemFileHandle() when parsing a corrupted VI file. This vulnerability may result i… |
CVE-2025-68118 | Critical | 9.1 | 2025-12-17 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.0, a vulnerability exists in FreeRDP’s certificate handling code on Wind… |
CVE-2025-11775 | | 2025-12-17 | An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, whi… | |
CVE-2025-14766 | High | 8.8 | 2025-12-16 | Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-53619 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead t… |
CVE-2025-53618 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead t… |
CVE-2025-52582 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can… |
CVE-2025-48429 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to… |
CVE-2025-62862 | Medium | 4.6 | 2025-12-16 | Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal… |
CVE-2025-9460 | High | 7.8 | 2025-12-16 | A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage… |
CVE-2025-9459 | High | 7.8 | 2025-12-16 | A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage… |
CVE-2025-9455 | High | 7.8 | 2025-12-16 | A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leve… |
CVE-2025-9454 | High | 7.8 | 2025-12-16 | A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage th… |
CVE-2025-9453 | High | 7.8 | 2025-12-16 | A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage th… |
CVE-2025-14593 | High | 7.8 | 2025-12-16 | A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverag… |
CVE-2025-10883 | High | 7.8 | 2025-12-16 | A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can lev… |
CVE-2025-14549 | High | 8.1 | 2025-12-15 | In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL… |
CVE-2025-67749 | | 2025-12-12 | PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCS… | |
CVE-2025-67721 | High | 7.5 | 2025-12-12 | Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. In versions 3.3 and below, incorrect handling of m… |
CVE-2025-66589 | Critical | 9.1 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past th… |
CVE-2025-36921 | Medium | 5.5 | 2025-12-11 | In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… |
CVE-2025-36918 | High | 7.8 | 2025-12-11 | In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of… |
CVE-2025-55307 | Low | 3.3 | 2025-12-11 | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing a crafted JavaScript call to… |
CVE-2025-66628 | High | 7.5 | 2025-12-10 | ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser contains a cr… |
CVE-2025-64899 | High | 7.8 | 2025-12-09 | Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an out-of-bounds read vulnerability wh… |
CVE-2025-64893 | High | 7.1 | 2025-12-09 | DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service. An… |
CVE-2025-62572 | High | 7.8 | 2025-12-09 | Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally. |
CVE-2025-62564 | High | 7.8 | 2025-12-09 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-62468 | Medium | 5.5 | 2025-12-09 | Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. |
CVE-2025-62457 | High | 7.8 | 2025-12-09 | Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-55233 | High | 7.8 | 2025-12-09 | Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-59391 | Medium | 6.5 | 2025-12-08 | A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when… |
CVE-2025-48622 | Medium | 5.5 | 2025-12-08 | In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with n… |
CVE-2025-48596 | High | 7.8 | 2025-12-08 | In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no add… |
CVE-2025-48592 | High | 7.5 | 2025-12-08 | In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure wi… |
CVE-2025-66624 | High | 7.5 | 2025-12-05 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. Prior to 1.5.0.rc2, The… |
CVE-2025-14104 | Medium | 6.1 | 2025-12-05 | A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` funct… |
CVE-2025-66293 | High | 7.1 | 2025-12-03 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an… |
CVE-2025-66409 | Critical | 9.1 | 2025-12-02 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on ESP32, rec… |
CVE-2025-58113 | Medium | 6.5 | 2025-12-02 | An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.7.3.401. By using a specially crafted EMF fil… |
CVE-2025-11789 | High | 7.5 | 2025-12-02 | Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and th… |
CVE-2025-20776 | Medium | 6.7 | 2025-12-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2025-20768 | High | 7.8 | 2025-12-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |