CWE-125 · Out-of-bounds Read (page 26)
Page 26 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53112 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/sseu: fix max_subslices array-index-out-of-bounds access It seems that commit bc… |
CVE-2023-53090 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfd_wait_on_events() function, the kfd_ev… |
CVE-2023-53057 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix global-out-of-bounds To loop a variable-length array, hci_init_stage_… |
CVE-2025-36521 | High | 8.8 | 2025-05-01 | MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must ope… |
CVE-2022-49883 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format On 64 bit ho… |
CVE-2022-49870 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior in bit shift for CAP_TO_MASK Shifting signed 32-bit… |
CVE-2022-49851 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "ear… |
CVE-2022-49844 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: can: dev: fix skb drop check In commit a6d190f8c767 ("can: skb: drop tx skb if in listen… |
CVE-2022-49799 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix wild-memory-access in register_synth_event() In register_synth_event(), if s… |
CVE-2022-49792 | High | 7.3 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fix potential array out of bound access Add sentinel at end of maps to… |
CVE-2025-37780 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isof… |
CVE-2025-37761 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range inval… |
CVE-2025-37749 | High | 8.2 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure we have enough data i… |
CVE-2025-37739 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() syzbot reports an… |
CVE-2025-23157 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility t… |
CVE-2025-23156 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: refactor hfi packet parsing logic words_count denotes the numbe… |
CVE-2025-4087 | Medium | 4.8 | 2025-04-29 | A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This cou… |
CVE-2025-4082 | Medium | 5.9 | 2025-04-29 | Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate… |
CVE-2025-43963 | Low | 2.9 | 2025-04-21 | In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0… |
CVE-2025-43962 | Low | 2.9 | 2025-04-21 | In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or t… |
CVE-2025-43961 | Low | 2.9 | 2025-04-21 | In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser. |
CVE-2025-39778 | High | 7.1 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_… |
CVE-2025-39735 | High | 7.1 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" label in ea_get(), t… |
CVE-2025-37785 | High | 7.8 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with director… |
CVE-2025-32415 | Low | 2.9 | 2025-04-17 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XM… |
CVE-2025-2073 | High | 8.8 | 2025-04-16 | Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bo… |
CVE-2025-22121 | High | 8.4 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: B… |
CVE-2025-22118 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ice: validate queue quanta parameters to prevent OOB access Add queue wraparound preventi… |
CVE-2025-22112 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnic_info array The bnxt_queue_{start | stop}() acc… |
CVE-2025-22107 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There… |
CVE-2025-22104 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex du… |
CVE-2025-22087 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix array bounds error with may_goto may_goto uses an additional 8 bytes on the stac… |
CVE-2025-22079 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth field is 16-b… |
CVE-2025-22039 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was originally typed… |
CVE-2025-22038 | High | 8.3 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_auth[psid->… |
CVE-2023-53034 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel… |
CVE-2025-32776 | Medium | 5.5 | 2025-04-15 | OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to… |
CVE-2025-32914 | High | 7.4 | 2025-04-14 | A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP cli… |
CVE-2025-32906 | High | 7.5 | 2025-04-14 | A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to us… |
CVE-2025-29834 | High | 7.5 | 2025-04-12 | Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2024-11679 | Medium | 4.4 | 2025-04-11 | An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated privi… |
CVE-2025-31354 | Medium | 4.3 | 2025-04-11 | Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to… |
CVE-2023-42982 | Medium | 6.4 | 2025-04-11 | Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improv… |
CVE-2025-32460 | Medium | 4.0 | 2025-04-09 | GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. |
CVE-2025-30309 | Medium | 5.5 | 2025-04-08 | XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou… |
CVE-2025-30308 | Medium | 5.5 | 2025-04-08 | XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou… |
CVE-2025-30307 | Medium | 5.5 | 2025-04-08 | XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou… |
CVE-2025-30306 | Medium | 5.5 | 2025-04-08 | XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou… |
CVE-2025-30305 | Medium | 5.5 | 2025-04-08 | XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou… |
CVE-2025-30303 | Medium | 5.5 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2025-30302 | Medium | 5.5 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2025-29811 | High | 7.8 | 2025-04-08 | Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. |
CVE-2025-27742 | Medium | 5.5 | 2025-04-08 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally. |
CVE-2025-27741 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-27733 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-27728 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2025-27490 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-27483 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-27204 | Medium | 5.5 | 2025-04-08 | After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-27202 | Medium | 5.5 | 2025-04-08 | Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2025-27201 | Medium | 5.5 | 2025-04-08 | Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2025-27187 | Medium | 5.5 | 2025-04-08 | After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-27186 | Medium | 5.5 | 2025-04-08 | After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-27184 | Medium | 5.5 | 2025-04-08 | After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-26675 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2025-26669 | High | 8.8 | 2025-04-08 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26642 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-3288 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-3287 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper valid… |
CVE-2025-3286 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-3285 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-20948 | Medium | 5.5 | 2025-04-08 | Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to read out-of-bounds memory. |
CVE-2025-20944 | Medium | 6.2 | 2025-04-08 | Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read out-of-bounds memory. |
CVE-2025-3407 | Medium | 6.3 | 2025-04-08 | A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhw_build_tileset_f… |
CVE-2025-3406 | Medium | 4.3 | 2025-04-08 | A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhw_build_tileset_from_image of the… |
CVE-2024-38797 | Medium | 4.6 | 2025-04-07 | EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjece… |
CVE-2025-21438 | High | 7.8 | 2025-04-07 | Memory corruption while IOCTL call is invoked from user-space to read board data. |
CVE-2025-20662 | Medium | 6.7 | 2025-04-07 | In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2025-20661 | Medium | 6.7 | 2025-04-07 | In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2025-20660 | Medium | 6.7 | 2025-04-07 | In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2025-20659 | Medium | 6.5 | 2025-04-07 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2025-20655 | Medium | 5.3 | 2025-04-07 | In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has al… |
CVE-2025-27534 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2025-22842 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-22452 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-20102 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-32365 | Medium | 4.0 | 2025-04-05 | Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced… |
CVE-2025-3160 | Low | 3.3 | 2025-04-03 | A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCo… |
CVE-2025-22003 | Medium | 5.5 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix out of bound read in strscpy() source Commit 7fdaf8966aae ("can: ucan: use… |
CVE-2025-2784 | High | 7.0 | 2025-04-03 | A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup cli… |
CVE-2025-21993 | High | 7.1 | 2025-04-02 | In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing… |
CVE-2025-21985 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_link_encoder_mappin… |
CVE-2025-21946 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If osidoffset, gsidoffset and dacloffset cou… |
CVE-2025-21920 | High | 7.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non… |
CVE-2025-21905 | High | 7.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file… |
CVE-2025-1659 | High | 7.8 | 2025-04-01 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vu… |
CVE-2025-1658 | High | 7.8 | 2025-04-01 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vu… |
CVE-2025-30458 | Critical | 9.8 | 2025-03-31 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sand… |
CVE-2025-24265 | Critical | 9.8 | 2025-03-31 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app… |
CVE-2025-24256 | Critical | 9.8 | 2025-03-31 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able t… |