CWE-125 · Out-of-bounds Read (page 27)
Page 27 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-24230 | Critical | 9.8 | 2025-03-31 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, m… |
CVE-2025-24228 | High | 7.8 | 2025-03-31 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An a… |
CVE-2025-24196 | High | 8.8 | 2025-03-31 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privi… |
CVE-2025-24182 | Medium | 5.5 | 2025-03-31 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visio… |
CVE-2025-24097 | Medium | 5.0 | 2025-03-31 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonom… |
CVE-2025-3015 | Medium | 6.3 | 2025-03-31 | A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepr… |
CVE-2022-49740 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This… |
CVE-2022-49738 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_extra_isize in is_alive() syzbot found a f2fs bug: BUG… |
CVE-2025-2755 | Medium | 6.3 | 2025-03-25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter… |
CVE-2025-2753 | Medium | 6.3 | 2025-03-25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of… |
CVE-2025-2752 | Medium | 4.3 | 2025-03-25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the lib… |
CVE-2025-2751 | Medium | 4.3 | 2025-03-25 | A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImpo… |
CVE-2025-2231 | High | 7.8 | 2025-03-24 | PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2025-30347 | Medium | 4.0 | 2025-03-21 | Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stev… |
CVE-2024-44199 | High | 7.1 | 2025-03-21 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system ter… |
CVE-2024-12055 | High | 7.5 | 2025-03-20 | A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. Wh… |
CVE-2024-11131 | Critical | 9.8 | 2025-03-19 | A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. T… |
CVE-2025-29913 | Critical | 9.8 | 2025-03-17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2025-1652 | High | 7.8 | 2025-03-13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vuln… |
CVE-2025-1433 | High | 7.8 | 2025-03-13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vuln… |
CVE-2025-1431 | High | 7.8 | 2025-03-13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vul… |
CVE-2025-1428 | High | 7.8 | 2025-03-13 | A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vu… |
CVE-2025-27788 | High | 7.5 | 2025-03-12 | JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read… |
CVE-2025-2012 | High | 7.8 | 2025-03-11 | Ashlar-Vellum Cobalt VS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2025-27180 | Medium | 5.5 | 2025-03-11 | Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2025-0900 | Low | 3.3 | 2025-03-11 | PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2025-27164 | Medium | 5.5 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure… |
CVE-2025-27163 | Medium | 5.5 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure… |
CVE-2025-27161 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, w… |
CVE-2025-24449 | Medium | 5.5 | 2025-03-11 | Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-24448 | Medium | 5.5 | 2025-03-11 | Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-24431 | Medium | 5.5 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure… |
CVE-2025-24991 | Medium | 5.5 | 2025-03-11 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2025-24988 | Medium | 6.6 | 2025-03-11 | Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2025-24987 | Medium | 6.6 | 2025-03-11 | Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2025-24059 | High | 7.8 | 2025-03-11 | Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-24055 | Medium | 4.3 | 2025-03-11 | Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack. |
CVE-2025-24050 | High | 7.8 | 2025-03-11 | Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2025-24048 | High | 7.8 | 2025-03-11 | Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2025-27438 | High | 7.8 | 2025-03-11 | A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009)… |
CVE-2025-23401 | High | 7.8 | 2025-03-11 | A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009)… |
CVE-2025-23399 | High | 7.8 | 2025-03-11 | A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009)… |
CVE-2025-2137 | High | 8.8 | 2025-03-10 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr… |
CVE-2024-56187 | Medium | 6.6 | 2025-03-10 | In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local informa… |
CVE-2024-56186 | Medium | 5.1 | 2025-03-10 | In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2024-56185 | Medium | 5.1 | 2025-03-10 | In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lea… |
CVE-2024-56184 | Medium | 5.1 | 2025-03-10 | In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2024-50600 | High | 7.5 | 2025-03-06 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boun… |
CVE-2025-20933 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory. |
CVE-2025-20932 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in parsing rle of bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to혻read out-of-bounds memory. |
CVE-2025-20930 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory. |
CVE-2025-20928 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory. |
CVE-2025-20927 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory. |
CVE-2025-20925 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allows local attackers to potentially read memory. |
CVE-2025-20922 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in appending text paragraph in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20921 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20920 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20919 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20918 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20917 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20916 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20915 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20914 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-20913 | Medium | 5.5 | 2025-03-06 | Out-of-bounds read in applying binary of drawing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. |
CVE-2025-1919 | High | 8.8 | 2025-03-05 | Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2025-1918 | High | 8.8 | 2025-03-05 | Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2025-1914 | High | 8.8 | 2025-03-05 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr… |
CVE-2025-1932 | High | 8.1 | 2025-03-04 | An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This… |
CVE-2025-22226 | High | 7.1 | 2025-03-04 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrativ… |
CVE-2025-23418 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-22847 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-22841 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-22443 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-21098 | Medium | 5.5 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check. |
CVE-2025-21089 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-20042 | Medium | 5.5 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read. |
CVE-2025-20021 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2024-43056 | Medium | 5.5 | 2025-03-03 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
CVE-2025-20652 | Medium | 4.6 | 2025-03-03 | In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical ac… |
CVE-2025-20651 | Medium | 4.1 | 2025-03-03 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20648 | Medium | 5.5 | 2025-03-03 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2025-21815 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warning syzkaller reported a UBSAN shift-out… |
CVE-2025-21794 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() Syzbot[1… |
CVE-2025-21789 | High | 7.3 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths Commit 69e3a6aa6… |
CVE-2025-21782 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix a oob in orangefs_debug_write I got a syzbot report: slab-out-of-bounds Rea… |
CVE-2025-21743 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for… |
CVE-2025-21742 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of N… |
CVE-2025-21741 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix DPE OoB read Fix an out-of-bounds DPE read, limit the number of proce… |
CVE-2024-58015 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placed in a buffer usin… |
CVE-2024-58014 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() In 'wlc_phy_iqcal… |
CVE-2024-58007 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds read of serial number On MSM8916 devices, the ser… |
CVE-2025-21719 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipmr: do not call mr_mfc_uses_dev() for unres entries syzbot found that calling mr_mfc_us… |
CVE-2025-21717 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq kvzalloc… |
CVE-2024-57998 | High | 7.3 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq ind… |
CVE-2024-57982 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. … |
CVE-2022-49706 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: zonefs: fix zonefs_iomap_begin() for reads If a readahead is issued to a sequential zone… |
CVE-2022-49674 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load (using raid_c… |
CVE-2022-49623 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: powerpc/xive/spapr: correct bitmap allocation size kasan detects access beyond the end of… |
CVE-2022-49560 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: exfat: check if cluster num is valid Syzbot reported slab-out-of-bounds read in exfat_cle… |
CVE-2022-49551 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usb: isp1760: Fix out-of-bounds array access Running the driver through kasan gives an in… |