cve.bz

CWE-125: Out-of-bounds Read, page 104

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-36838EPSS 0.2%

    An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker with low privileges, to cause a Denial of Service (DoS). If a low privileged user …

  2. 5.5CVE-2023-3649EPSS 0.2%

    iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

  3. 7.5CVE-2023-35694EPSS 0.4%

    In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction…

  4. 7.2CVE-2023-35691EPSS 0.5%

    there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation.

  5. 5.5CVE-2023-29319EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  6. 5.5CVE-2023-29318EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  7. 5.5CVE-2023-29317EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  8. 5.5CVE-2023-29316EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  9. 5.5CVE-2023-29315EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  10. 5.5CVE-2023-29314EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  11. 5.5CVE-2023-29313EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  12. 5.5CVE-2023-29312EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  13. 5.5CVE-2023-29311EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  14. 5.5CVE-2023-29310EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  15. 5.5CVE-2023-29309EPSS 0.5%

    Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati…

  16. 5.5CVE-2021-44696EPSS 0.3%

    Adobe Prelude version 22.1.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation…

  17. 5.5CVE-2021-43760EPSS 0.3%

    Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR…

  18. 5.5CVE-2021-43759EPSS 0.3%

    Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR…

  19. 5.5CVE-2021-43758EPSS 0.3%

    Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR…

  20. 7.8CVE-2021-43757EPSS 0.4%

    Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR…

  21. 4.4CVE-2023-33904EPSS 0.1%

    In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  22. 7.8CVE-2023-35358EPSS 0.9%

    Windows Kernel Elevation of Privilege Vulnerability

  23. 7.8CVE-2023-35357EPSS 0.9%

    Windows Kernel Elevation of Privilege Vulnerability

  24. 6.5CVE-2023-35319EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  25. 6.5CVE-2023-35318EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  26. 6.5CVE-2023-35316EPSS 1.4%

    Remote Procedure Call Runtime Information Disclosure Vulnerability

  27. 6.5CVE-2023-35314EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  28. 7.8CVE-2023-35299EPSS 0.4%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  29. 6.5CVE-2023-35296EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  30. 6.5CVE-2023-33164EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  31. 5.5CVE-2023-33162EPSS 0.8%

    Microsoft Excel Information Disclosure Vulnerability

  32. 7.5CVE-2023-32045EPSS 1.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  33. 7.5CVE-2023-32044EPSS 1.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  34. 5.5CVE-2023-32039EPSS 0.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  35. 7.5CVE-2023-32035EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  36. 7.5CVE-2023-32034EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  37. 7.5CVE-2023-36201EPSS 0.6%

    An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays.

  38. 4.6CVE-2023-37453EPSS 0.6%

    An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.

  39. 9.1CVE-2023-37240EPSS 0.5%

    Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read.

  40. 7.1CVE-2023-3523EPSS 0.4%

    Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

  41. 4.4CVE-2023-30665EPSS 0.2%

    Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read.

  42. 7.8CVE-2023-28542EPSS 0.1%

    Memory Corruption in WLAN HOST while fetching TX status information.

  43. 7.8CVE-2023-28541EPSS 0.1%

    Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

  44. 6.7CVE-2023-20774EPSS 0.1%

    In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0729…

  45. 4.4CVE-2023-20748EPSS 0.09%

    In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07536…

  46. 4.6CVE-2023-3497EPSS 0.1%

    Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. (Chromium security severity: Medium)

  47. 7.8CVE-2023-26085EPSS 0.3%

    A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02.

  48. 7.5CVE-2023-21226EPSS 0.4%

    In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interacti…

  49. 7.5CVE-2023-21224EPSS 0.5%

    In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interac…

  50. 7.5CVE-2023-21223EPSS 0.4%

    In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interacti…