CWE-125 · Out-of-bounds Read (page 29)
Page 29 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21258 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21257 | Medium | 5.5 | 2025-01-14 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
CVE-2025-21256 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21255 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21249 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21246 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21245 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21232 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21229 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21228 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21227 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21226 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21215 | Medium | 4.6 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21178 | High | 8.8 | 2025-01-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2024-13169 | High | 7.8 | 2025-01-14 | An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacke… |
CVE-2024-46670 | High | 7.5 | 2025-01-14 | An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 2… |
CVE-2024-36504 | Medium | 6.5 | 2025-01-14 | An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6… |
CVE-2024-52332 | High | 7.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() c… |
CVE-2024-41935 | High | 7.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure d… |
CVE-2024-57822 | Medium | 4.0 | 2025-01-10 | In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_i… |
CVE-2025-21598 | High | 7.5 | 2025-01-09 | An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based… |
CVE-2025-21600 | Medium | 6.5 | 2025-01-09 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logic… |
CVE-2024-35532 | Critical | 9.1 | 2025-01-07 | An XML External Entity (XXE) injection vulnerability in Intersec Geosafe-ea 2022.12, 2022.13, and 2022.14 allows attackers to perform arbitrary file reading un… |
CVE-2024-45070 | Medium | 5.5 | 2025-01-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-48457 | High | 7.5 | 2025-01-06 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3… |
CVE-2024-48456 | High | 7.5 | 2025-01-06 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3… |
CVE-2024-45559 | Medium | 5.5 | 2025-01-06 | Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend. |
CVE-2024-45558 | High | 7.5 | 2025-01-06 | Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
CVE-2024-45548 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call. |
CVE-2024-45546 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. |
CVE-2024-43063 | Medium | 6.1 | 2025-01-06 | information disclosure while invoking the mailbox read API. |
CVE-2024-33067 | Medium | 6.1 | 2025-01-06 | Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
CVE-2024-33061 | Medium | 6.8 | 2025-01-06 | Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. |
CVE-2024-23366 | Medium | 6.6 | 2025-01-06 | Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size. |
CVE-2024-53839 | Medium | 5.5 | 2025-01-03 | In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2024-53834 | High | 7.5 | 2025-01-03 | In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote inf… |
CVE-2024-12751 | High | 7.8 | 2024-12-30 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-56721 | High | 7.1 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array… |
CVE-2024-56706 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU… |
CVE-2021-22484 | High | 7.5 | 2024-12-28 | Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause… |
CVE-2020-1824 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1823 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1822 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1821 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1820 | Low | 3.7 | 2024-12-28 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2024-56662 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Fix an issue detected by syzbot w… |
CVE-2024-56650 | High | 7.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following… |
CVE-2024-56627 | High | 8.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read An offset from client could be a n… |
CVE-2024-56597 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix shift-out-of-bounds in dbSplit When dmt_budmin is less than zero, it causes erro… |
CVE-2024-56555 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binder_add_freeze_work() In binder_add_freeze_work() we iterate over t… |
CVE-2020-9211 | Medium | 6.4 | 2024-12-27 | There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnera… |
CVE-2020-1819 | Low | 3.7 | 2024-12-27 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2020-1818 | Low | 3.7 | 2024-12-27 | There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. Th… |
CVE-2024-53162 | High | 7.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has "num_objs… |
CVE-2024-53150 | High | 7.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio… |
CVE-2024-53147 | High | 7.8 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is… |
CVE-2024-56378 | Medium | 4.3 | 2024-12-23 | libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc. |
CVE-2024-51471 | Medium | 5.3 | 2024-12-19 | IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to informati… |
CVE-2024-11616 | | 2024-12-19 | Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vu… | |
CVE-2022-44517 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44516 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44515 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2024-12693 | High | 8.8 | 2024-12-18 | Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… |
CVE-2024-47039 | Medium | 5.5 | 2024-12-18 | In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-11614 | High | 7.4 | 2024-12-18 | An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash t… |
CVE-2024-56083 | High | 8.1 | 2024-12-16 | Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.com URL (ak… |
CVE-2024-9508 | High | 7.8 | 2024-12-13 | Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code. |
CVE-2024-12212 | High | 7.8 | 2024-12-13 | The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading p… |
CVE-2024-54116 | Medium | 4.3 | 2024-12-12 | Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2024-54115 | Medium | 4.3 | 2024-12-12 | Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54114 | Medium | 4.4 | 2024-12-12 | Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54109 | Medium | 6.5 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54108 | Medium | 6.5 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54107 | High | 7.1 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54508 | High | 7.5 | 2024-12-12 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18… |
CVE-2024-54506 | Critical | 9.8 | 2024-12-12 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpect… |
CVE-2024-54502 | Medium | 6.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visio… |
CVE-2024-44246 | Medium | 5.3 | 2024-12-12 | The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS… |
CVE-2024-49113 | High | 7.5 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49111 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49110 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49109 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49103 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49101 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49099 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49098 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49092 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49083 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49078 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49077 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49065 | Medium | 5.5 | 2024-12-12 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-47778 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gs… |
CVE-2024-47777 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk funct… |
CVE-2024-47776 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. Th… |
CVE-2024-47775 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavp… |
CVE-2024-47774 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_c… |
CVE-2024-47602 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_d… |
CVE-2024-47600 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in… |
CVE-2024-47598 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table fu… |
CVE-2024-47597 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux… |