CWE-125 · Out-of-bounds Read (page 25)
Page 25 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-33063 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-33062 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-33061 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-33060 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-33059 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-33058 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-33055 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-32720 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-32719 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-32716 | High | 7.8 | 2025-06-10 | Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-32715 | Medium | 6.5 | 2025-06-10 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2025-24069 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-24065 | Medium | 5.5 | 2025-06-10 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-5918 | Low | 3.9 | 2025-06-09 | A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea… |
CVE-2025-23235 | Low | 3.3 | 2025-06-08 | in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-38004 | High | 7.3 | 2025-06-08 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can… |
CVE-2025-29871 | Medium | 5.5 | 2025-06-06 | An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the… |
CVE-2025-20992 | Medium | 4.0 | 2025-06-04 | Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory. |
CVE-2025-20988 | Medium | 5.5 | 2025-06-04 | Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory. |
CVE-2025-5419 | High | 8.8 | 2025-06-03 | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-20001 | Medium | 6.5 | 2025-06-02 | An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead t… |
CVE-2025-5307 | High | 7.8 | 2025-05-29 | Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and… |
CVE-2025-47295 | Low | 3.7 | 2025-05-28 | A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthe… |
CVE-2024-49197 | Medium | 6.5 | 2025-05-27 | An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack… |
CVE-2025-5204 | Low | 3.3 | 2025-05-26 | A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump_3DGS_M… |
CVE-2025-5203 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the… |
CVE-2025-5202 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDL… |
CVE-2025-5201 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAnd… |
CVE-2025-5200 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_… |
CVE-2025-5169 | Low | 3.3 | 2025-05-26 | A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_… |
CVE-2025-5168 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::Impo… |
CVE-2025-5167 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImp… |
CVE-2025-5166 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFil… |
CVE-2025-5165 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurface… |
CVE-2023-53154 | Low | 2.9 | 2025-05-23 | parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called. |
CVE-2022-31812 | High | 7.5 | 2025-05-23 | A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end o… |
CVE-2025-46716 | Medium | 5.5 | 2025-05-22 | Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.1… |
CVE-2025-20152 | High | 8.6 | 2025-05-21 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a den… |
CVE-2025-4969 | Medium | 6.5 | 2025-05-21 | A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can all… |
CVE-2025-37975 | High | 7.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[j] to acce… |
CVE-2025-37973 | High | 8.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation Curren… |
CVE-2025-37911 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -w When retrieving the FW coredump usin… |
CVE-2025-47757 | High | 7.8 | 2025-05-19 | V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6MemInIF.dll!set_plc_type_default function. Opening specially crafted V7 or V8 files… |
CVE-2025-47756 | High | 7.8 | 2025-05-19 | V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom::set_mr400_strc function. Opening specially crafted V7 or V8… |
CVE-2025-47755 | High | 7.8 | 2025-05-19 | V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4_SaveEnvFile function. Opening specially crafted V7 or V8 files may lead… |
CVE-2025-47754 | High | 7.8 | 2025-05-19 | V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!Conv_Macro_Data function. Opening specially crafted V7 or V8 files may lead… |
CVE-2025-47753 | High | 7.8 | 2025-05-19 | V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CDrawSLine::GetRectArea function. Opening specially crafted V7 or V8 files… |
CVE-2025-4919 | High | 8.8 | 2025-05-17 | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 1… |
CVE-2025-4918 | Critical | 9.8 | 2025-05-17 | An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 1… |
CVE-2025-48188 | Low | 2.9 | 2025-05-16 | libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a… |
CVE-2025-30420 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite. This… |
CVE-2025-30419 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design Suite. T… |
CVE-2025-27891 | Critical | 9.1 | 2025-05-14 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920… |
CVE-2024-56427 | Medium | 6.5 | 2025-05-14 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W9… |
CVE-2025-43551 | Medium | 5.5 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-20101 | High | 8.4 | 2025-05-13 | Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via loc… |
CVE-2025-20026 | Medium | 6.1 | 2025-05-13 | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable de… |
CVE-2024-31150 | Low | 3.8 | 2025-05-13 | Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2025-32707 | High | 7.8 | 2025-05-13 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-32705 | High | 7.8 | 2025-05-13 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. |
CVE-2025-32704 | High | 8.4 | 2025-05-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-30381 | High | 7.8 | 2025-05-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-30376 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29974 | Medium | 5.7 | 2025-05-13 | Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2025-29971 | High | 7.5 | 2025-05-13 | Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network. |
CVE-2025-29961 | Medium | 6.5 | 2025-05-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-29960 | Medium | 6.5 | 2025-05-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-29956 | Medium | 5.4 | 2025-05-13 | Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network. |
CVE-2025-29839 | Medium | 4.0 | 2025-05-13 | Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally. |
CVE-2025-29836 | Medium | 6.5 | 2025-05-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-29835 | Medium | 6.5 | 2025-05-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-29832 | Medium | 6.5 | 2025-05-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-40578 | Medium | 4.3 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet… |
CVE-2025-40577 | Medium | 4.3 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Prof… |
CVE-2025-32454 | High | 7.8 | 2025-05-13 | A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versions < V2312.0010)… |
CVE-2025-30176 | High | 7.5 | 2025-05-13 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote… |
CVE-2025-30174 | High | 7.5 | 2025-05-13 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote… |
CVE-2025-31209 | Medium | 6.3 | 2025-05-12 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS So… |
CVE-2025-31196 | Medium | 5.5 | 2025-05-12 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS S… |
CVE-2025-47816 | Low | 2.9 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at… |
CVE-2025-37879 | Critical | 9.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() a… |
CVE-2025-37846 | High | 7.1 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not us… |
CVE-2025-4098 | | 2025-05-08 | Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose informatio… | |
CVE-2025-1254 | High | 7.4 | 2025-05-08 | Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue aff… |
CVE-2025-37825 | High | 7.1 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmet_enable_port When trying to enable a port that ha… |
CVE-2025-35995 | High | 7.5 | 2025-05-07 | When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual ser… |
CVE-2020-36791 | High | 7.8 | 2025-05-07 | In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599be01ee567 ("net_sch… |
CVE-2025-20976 | Medium | 5.5 | 2025-05-07 | Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory. |
CVE-2025-1400 | Low | 3.1 | 2025-05-07 | Out-of-bounds Read vulnerability in unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network. |
CVE-2025-1399 | Low | 3.1 | 2025-05-07 | Out-of-bounds Read vulnerability in unpack_response (session.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network. |
CVE-2025-21475 | High | 7.8 | 2025-05-06 | Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. |
CVE-2025-21459 | High | 7.5 | 2025-05-06 | Transient DOS while parsing per STA profile in ML IE. |
CVE-2024-49847 | High | 7.5 | 2025-05-06 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. |
CVE-2024-49846 | High | 8.2 | 2025-05-06 | Memory corruption while decoding of OTA messages from T3448 IE. |
CVE-2024-45568 | Medium | 6.7 | 2025-05-06 | Memory corruption due to improper bounds check while command handling in camera-kernel driver. |
CVE-2025-46591 | Medium | 6.2 | 2025-05-06 | Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-2509 | High | 7.8 | 2025-05-06 | Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process… |
CVE-2023-53136 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: af_unix: fix struct pid leaks in OOB support syzbot reported struct pid leak [1]. Issue… |
CVE-2023-53135 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode When CONFIG_FRAME_POINTER… |
CVE-2023-53117 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id… |