cve.bz

CWE-125: Out-of-bounds Read, page 100

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.1CVE-2023-45682EPSS 0.6%

    stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is negative. As it can be seen in the definition of `DECODE_RAW` a negative `var` …

  2. 8.1CVE-2023-45662EPSS 0.8%

    stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set to a number that doesn’t match the real number of components per pixel, the library attem…

  3. 7.1CVE-2023-45661EPSS 0.6%

    stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. This happens because two_back points to a memory address lower than the start of th…

  4. 7.8CVE-2023-3487EPSS 0.3%

    An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

  5. 6.0CVE-2023-34044EPSS 0.2%

    VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local…

  6. 7.8CVE-2023-5059EPSS 0.2%

    Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the cur…

  7. 7.5CVE-2023-35663EPSS 0.3%

    In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not n…

  8. 7.5CVE-2023-35656EPSS 0.3%

    In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User inte…

  9. 2.7CVE-2023-22113EPSS 1.0%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network …

  10. 7.5CVE-2023-23581EPSS 0.8%

    A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service.

  11. 5.5CVE-2023-43789EPSS 0.4%

    A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.

  12. 7.5CVE-2023-35661EPSS 0.4%

    In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i…

  13. 6.7CVE-2023-35655EPSS 0.1%

    In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not…

  14. 6.7CVE-2023-35654EPSS 0.10%

    In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi…

  15. 7.5CVE-2023-35652EPSS 0.4%

    In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. Use…

  16. 9.8CVE-2023-35648EPSS 0.4%

    In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. Use…

  17. 9.8CVE-2023-35647EPSS 0.4%

    In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. Use…

  18. 7.5CVE-2023-44114EPSS 0.4%

    Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.

  19. 7.7CVE-2023-5520EPSS 0.3%

    Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

  20. 7.5CVE-2023-44103EPSS 0.4%

    Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.

  21. 5.5CVE-2023-38217EPSS 0.4%

    Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations …

  22. 7.8CVE-2023-42138EPSS 0.2%

    Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of …

  23. 5.5CVE-2023-36728EPSS 0.7%

    Microsoft SQL Server Denial of Service Vulnerability

  24. 7.8CVE-2023-36701EPSS 0.6%

    Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

  25. 5.5CVE-2023-43788EPSS 0.4%

    A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

  26. 5.5CVE-2023-43785EPSS 0.7%

    A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.

  27. 7.8CVE-2023-44087EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an…

  28. 7.8CVE-2023-44086EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an…

  29. 7.8CVE-2023-44085EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an…

  30. 7.8CVE-2023-44084EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an…

  31. 4.4CVE-2023-39194EPSS 0.4%

    A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN…

  32. 6.0CVE-2023-39193EPSS 0.4%

    A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or …

  33. 6.0CVE-2023-39192EPSS 0.4%

    A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size field…

  34. 6.0CVE-2023-39189EPSS 0.4%

    A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-…

  35. 5.5CVE-2023-42755EPSS 0.4%

    A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may a…

  36. 7.1CVE-2023-5377EPSS 0.4%

    Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.

  37. 7.5CVE-2023-33027EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing rsn ies.

  38. 5.5CVE-2023-28571EPSS 0.1%

    Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

  39. 6.5CVE-2023-42822EPSS 0.7%

    xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp execut…

  40. 5.5CVE-2023-41232EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory.

  41. 9.1CVE-2023-40436EPSS 1.3%

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory.

  42. 5.5CVE-2023-40410EPSS 0.3%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to disclose kernel memory.

  43. 7.1CVE-2023-4156EPSS 0.4%

    A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

  44. 7.5CVE-2023-42821EPSS 1.3%

    The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b16010c2ee`, which corresponds with commit `14b16010c2ee7ff33a940a541d993bd043a889…

  45. 6.5CVE-2023-4527EPSS 1.7%

    A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclos…

  46. 5.3CVE-2023-37459EPSS 0.5%

    Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received, the Contiki-NG network stack attempts to start the periodic TCP timer if it is a TCP packet with the SYN flag set. But …

  47. 5.3CVE-2023-37281EPSS 0.5%

    Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IPHC header decompression, Contiki-NG confirms the received packet buffer contains enough da…

  48. 7.1CVE-2023-25584EPSS 0.4%

    An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

  49. 5.5CVE-2023-36803EPSS 1.0%

    Windows Kernel Information Disclosure Vulnerability

  50. 5.5CVE-2023-36766EPSS 1.2%

    Microsoft Excel Information Disclosure Vulnerability