CWE-125: Out-of-bounds Read, page 10
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Ask an AI about CWE-125
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.7CVE-2026-69974EPSS 0.3%
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69967EPSS 0.5%
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69959EPSS 0.4%
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
- 6.5CVE-2026-69955EPSS 1.0%
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-69952EPSS 0.4%
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2026-69940EPSS 1.0%
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2026-69922EPSS 0.9%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2026-69919EPSS 0.5%
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69914EPSS 0.5%
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69867EPSS 0.4%
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69721EPSS 0.5%
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69675EPSS 0.5%
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-69577EPSS 1.1%
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- 4.7CVE-2026-69506EPSS 0.4%
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69471EPSS 0.4%
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-69454EPSS 1.1%
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- 5.3CVE-2026-108466EPSS 0.7%
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
- 6.5CVE-2026-108129EPSS 1.1%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- 6.5CVE-2026-108128EPSS 1.1%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- 6.5CVE-2026-108127EPSS 1.1%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- 5.5CVE-2026-105726EPSS 0.4%
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
- 8.8CVE-2026-105718EPSS 1.0%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-105595EPSS 0.8%
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-105007EPSS 0.9%
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario…
- 7.8CVE-2026-105004EPSS 0.4%
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-103857EPSS 0.2%
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires use…
- 5.5CVE-2026-103856EPSS 0.3%
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires use…
- 7.5CVE-2026-103569EPSS 1.1%
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-103553EPSS 0.4%
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2026-102867EPSS 1.0%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
- 8.8CVE-2026-102225EPSS 0.9%
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- 5.3CVE-2026-102198EPSS 0.8%
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
- 6.5CVE-2026-81507EPSS 0.3%
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processing in l2c_main.c and l2c_utils.c does not consistently validate…
- 5.5CVE-2026-105460EPSS 0.1%
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link ke…
- 7.5CVE-2026-95114EPSS 0.5%
libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service
- 6.9CVE-2026-109951EPSS 0.4%
FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers…
- 5.3CVE-2026-109950EPSS 0.3%
FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than…
- 7.1CVE-2026-109677EPSS 0.3%
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use q…
- 7.3CVE-2026-65150EPSS 0.1%
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service.
- 7.3CVE-2026-65147EPSS 0.1%
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
- 6.9CVE-2026-89208EPSS 0.3%
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PX…
- 1.9CVE-2026-108960EPSS 0.1%
A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split …
- 1.9CVE-2026-108955EPSS 0.1%
A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. This manipulation of the argument data_offs…
- 8.1CVE-2026-81858EPSS 0.3%
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.
- 7.1CVE-2026-85968EPSS 0.3%
Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality. A remote authenticated attacker could exploit this vulnerability to cause server instability or di…
- 9.8CVE-2026-84286EPSS 0.6%
ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resu…
- 4.8CVE-2026-109281EPSS 0.1%
ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a craf…
- 6.9CVE-2026-109269EPSS 0.3%
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted …
- 6.9CVE-2026-109265EPSS 0.4%
ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a…
- 6.0CVE-2026-109253EPSS 0.3%
FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming alignment padding. Malicious or compromised RDP servers can send crafted unaligned RD…