CWE-125 · Out-of-bounds Read (page 3)
Page 3 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-90463 | Medium | 4.0 | 2026-09-14 | A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests t… |
CVE-2026-54542 | Low | 3.7 | 2026-09-14 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can… |
CVE-2026-90716 | Medium | 5.5 | 2026-09-14 | A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parse_number_expression of the file src/compiler/gravity_parser.c o… |
CVE-2026-90698 | Medium | 5.3 | 2026-09-14 | A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_tex… |
CVE-2025-26790 | Low | 3.7 | 2026-09-14 | Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document… |
CVE-2026-90681 | Low | 3.3 | 2026-09-14 | A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This mani… |
CVE-2026-33968 | Low | 2.8 | 2026-09-14 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check… |
CVE-2026-33962 | Low | 2.8 | 2026-09-14 | An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger… |
CVE-2026-52297 | Low | 2.9 | 2026-09-13 | FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c. |
CVE-2026-52296 | Low | 2.9 | 2026-09-13 | FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. |
CVE-2026-38332 | Low | 2.9 | 2026-09-13 | TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length. |
CVE-2026-90775 | Medium | 6.5 | 2026-09-13 | PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attacker… |
CVE-2026-90560 | High | 8.2 | 2026-09-12 | zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments… |
CVE-2026-90557 | Medium | 6.1 | 2026-09-12 | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit acti… |
CVE-2026-78546 | | 2026-09-11 | Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), befor… | |
CVE-2026-13326 | | 2026-09-11 | An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure… | |
CVE-2026-89160 | Low | 3.7 | 2026-09-11 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject. |
CVE-2026-89156 | Low | 2.9 | 2026-09-11 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data. |
CVE-2026-16172 | | 2026-09-10 | Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially… | |
CVE-2026-49837 | Medium | 5.9 | 2026-09-10 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability pars… |
CVE-2026-79592 | High | 7.5 | 2026-09-10 | An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offs… |
CVE-2026-89046 | High | 8.2 | 2026-09-10 | zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition… |
CVE-2026-88054 | Medium | 5.5 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks b… |
CVE-2026-88048 | High | 7.1 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserial… |
CVE-2026-87961 | High | 7.1 | 2026-09-10 | ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header function due to a shadowed length para… |
CVE-2026-42806 | Medium | 4.3 | 2026-09-10 | An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data par… |
CVE-2026-79522 | Medium | 6.5 | 2026-09-09 | An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via se… |
CVE-2026-79516 | Medium | 4.0 | 2026-09-09 | An out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service (DoS) via se… |
CVE-2026-79515 | Medium | 4.3 | 2026-09-09 | An out-of-bounds read in the stbtt_GetGlyphShape component of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service (DoS) via sending a cra… |
CVE-2026-79514 | Medium | 6.5 | 2026-09-09 | An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a cra… |
CVE-2026-61908 | Low | 3.1 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to d… |
CVE-2026-87875 | Medium | 4.3 | 2026-09-09 | The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-o… |
CVE-2026-22590 | Critical | 9.1 | 2026-09-09 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Versions prior to 2.6.12, 2.14… |
CVE-2026-87824 | High | 7.5 | 2026-09-09 | zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supp… |
CVE-2026-73324 | Medium | 4.3 | 2026-09-09 | Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-control… |
CVE-2026-87795 | High | 8.2 | 2026-09-09 | zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attac… |
CVE-2026-87736 | Medium | 4.3 | 2026-09-09 | An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. |
CVE-2026-81646 | Medium | 5.9 | 2026-09-09 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-49314 | High | 7.3 | 2026-09-09 | OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-87650 | Critical | 9.6 | 2026-09-09 | Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… |
CVE-2026-87640 | Medium | 6.1 | 2026-09-09 | Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read… |
CVE-2026-87604 | High | 8.3 | 2026-09-09 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute a… |
CVE-2026-87602 | Medium | 4.7 | 2026-09-09 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via… |
CVE-2026-87596 | Medium | 4.3 | 2026-09-09 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chro… |
CVE-2026-87592 | Medium | 4.3 | 2026-09-09 | Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML p… |
CVE-2026-87586 | Medium | 4.3 | 2026-09-09 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chro… |
CVE-2026-87525 | Low | 2.7 | 2026-09-09 | Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local… |
CVE-2026-87440 | High | 8.8 | 2026-09-09 | Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p… |
CVE-2026-86564 | Low | 3.3 | 2026-09-08 | A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds re… |
CVE-2026-18090 | Medium | 6.1 | 2026-09-08 | A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Imag… |
CVE-2026-81991 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
CVE-2026-81982 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
CVE-2026-81978 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
CVE-2026-80160 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
CVE-2026-79910 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
CVE-2026-66308 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. |
CVE-2026-85875 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-84001 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. |
CVE-2026-83989 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. |
CVE-2026-83501 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-81957 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81956 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81400 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81395 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81393 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81392 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81390 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-80096 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
CVE-2026-80090 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80089 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80088 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80086 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80084 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80082 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80079 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80078 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80076 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80073 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78522 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78520 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78518 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-78515 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78513 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
CVE-2026-78508 | Medium | 4.6 | 2026-09-08 | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-78503 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78502 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78455 | Medium | 4.3 | 2026-09-08 | Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-78454 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
CVE-2026-78452 | Medium | 4.6 | 2026-09-08 | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-78441 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. |
CVE-2026-77911 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-77895 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-77893 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-77891 | Medium | 6.4 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
CVE-2026-77887 | Medium | 6.4 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
CVE-2026-77886 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-77503 | High | 8.4 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-77502 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-77501 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-77498 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |