CWE-125 · Out-of-bounds Read (page 23)
Page 23 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-57958 | Medium | 5.7 | 2025-02-06 | Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2024-57956 | Low | 2.8 | 2025-02-06 | Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-24497 | High | 7.5 | 2025-02-05 | When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of… |
CVE-2025-20905 | Medium | 6.3 | 2025-02-04 | Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory. |
CVE-2025-20901 | Medium | 4.4 | 2025-02-04 | Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory. |
CVE-2025-20891 | Medium | 5.3 | 2025-02-04 | Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary… |
CVE-2025-20887 | Medium | 5.3 | 2025-02-04 | Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User inte… |
CVE-2024-49839 | High | 8.2 | 2025-02-03 | Memory corruption during management frame processing due to mismatch in T2LM info element. |
CVE-2024-49838 | High | 8.2 | 2025-02-03 | Information disclosure while parsing the OCI IE with invalid length. |
CVE-2024-38417 | Medium | 6.1 | 2025-02-03 | Information disclosure while processing IO control commands. |
CVE-2024-38416 | Medium | 6.1 | 2025-02-03 | Information disclosure during audio playback. |
CVE-2024-38414 | Medium | 6.1 | 2025-02-03 | Information disclosure while processing information on firmware image during core initialization. |
CVE-2024-38404 | High | 7.5 | 2025-02-03 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem. |
CVE-2025-20643 | Low | 3.9 | 2025-02-03 | In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20640 | Medium | 4.3 | 2025-02-03 | In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2017-13318 | Medium | 5.7 | 2025-01-28 | In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disc… |
CVE-2017-13317 | Medium | 5.7 | 2025-01-28 | In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote info… |
CVE-2024-0149 | Low | 3.3 | 2025-01-28 | NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerabi… |
CVE-2025-24162 | Medium | 6.5 | 2025-01-27 | This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, vision… |
CVE-2025-24149 | Medium | 5.5 | 2025-01-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS So… |
CVE-2025-24115 | Medium | 6.3 | 2025-01-27 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may… |
CVE-2025-24092 | Medium | 5.5 | 2025-01-27 | This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read sensitive lo… |
CVE-2024-54518 | Medium | 5.3 | 2025-01-27 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may b… |
CVE-2024-54507 | Medium | 5.5 | 2025-01-27 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An attacker with user… |
CVE-2024-54478 | Medium | 6.5 | 2025-01-27 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2… |
CVE-2025-0612 | High | 7.5 | 2025-01-22 | Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-24417 | High | 7.5 | 2025-01-21 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_p… |
CVE-2025-21530 | Medium | 4.3 | 2025-01-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.6… |
CVE-2024-57945 | High | 7.8 | 2025-01-21 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the vir… |
CVE-2024-57928 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfs_read_to_pagecache() gets an error f… |
CVE-2025-21647 | High | 7.3 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed… |
CVE-2018-9464 | High | 7.8 | 2025-01-18 | In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2018-9383 | Medium | 4.4 | 2025-01-17 | In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi… |
CVE-2025-0518 | Medium | 5.3 | 2025-01-16 | Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with… |
CVE-2025-0437 | High | 8.8 | 2025-01-15 | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-48855 | Medium | 5.3 | 2025-01-14 | Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in t… |
CVE-2025-21374 | Medium | 5.5 | 2025-01-14 | Windows CSC Service Information Disclosure Vulnerability |
CVE-2025-21341 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21327 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21324 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21310 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21265 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21263 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21261 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21260 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21258 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21257 | Medium | 5.5 | 2025-01-14 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
CVE-2025-21256 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21255 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21249 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21246 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21245 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21232 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21229 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21228 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21227 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21226 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21215 | Medium | 4.6 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21178 | High | 8.8 | 2025-01-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2024-13169 | High | 7.8 | 2025-01-14 | An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacke… |
CVE-2024-46670 | High | 7.5 | 2025-01-14 | An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 2… |
CVE-2024-36504 | Medium | 6.5 | 2025-01-14 | An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6… |
CVE-2024-52332 | High | 7.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() c… |
CVE-2024-41935 | High | 7.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure d… |
CVE-2024-57822 | Medium | 4.0 | 2025-01-10 | In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_i… |
CVE-2025-21598 | High | 7.5 | 2025-01-09 | An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based… |
CVE-2025-21600 | Medium | 6.5 | 2025-01-09 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logic… |
CVE-2024-35532 | Critical | 9.1 | 2025-01-07 | An XML External Entity (XXE) injection vulnerability in Intersec Geosafe-ea 2022.12, 2022.13, and 2022.14 allows attackers to perform arbitrary file reading un… |
CVE-2024-45070 | Medium | 5.5 | 2025-01-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-48457 | High | 7.5 | 2025-01-06 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3… |
CVE-2024-48456 | High | 7.5 | 2025-01-06 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3… |
CVE-2024-45559 | Medium | 5.5 | 2025-01-06 | Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend. |
CVE-2024-45558 | High | 7.5 | 2025-01-06 | Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
CVE-2024-45548 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call. |
CVE-2024-45546 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. |
CVE-2024-43063 | Medium | 6.1 | 2025-01-06 | information disclosure while invoking the mailbox read API. |
CVE-2024-33067 | Medium | 6.1 | 2025-01-06 | Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
CVE-2024-33061 | Medium | 6.8 | 2025-01-06 | Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. |
CVE-2024-23366 | Medium | 6.6 | 2025-01-06 | Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size. |
CVE-2024-53839 | Medium | 5.5 | 2025-01-03 | In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2024-53834 | High | 7.5 | 2025-01-03 | In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote inf… |
CVE-2024-12751 | High | 7.8 | 2024-12-30 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-56721 | High | 7.1 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array… |
CVE-2024-56706 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU… |
CVE-2021-22484 | High | 7.5 | 2024-12-28 | Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause… |
CVE-2020-1824 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1823 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1822 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1821 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1820 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2024-56662 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Fix an issue detected by syzbot w… |
CVE-2024-56650 | High | 7.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following… |
CVE-2024-56627 | High | 8.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read An offset from client could be a n… |
CVE-2024-56597 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix shift-out-of-bounds in dbSplit When dmt_budmin is less than zero, it causes erro… |
CVE-2024-56555 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binder_add_freeze_work() In binder_add_freeze_work() we iterate over t… |
CVE-2020-9211 | Medium | 6.4 | 2024-12-27 | There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnera… |
CVE-2020-1819 | Low | 3.7 | 2024-12-27 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1818 | Low | 3.7 | 2024-12-27 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2024-53162 | High | 7.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has "num_objs… |
CVE-2024-53150 | High | 7.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio… |