cve.bz

CWE-125: Out-of-bounds Read, page 108

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2021-31239EPSS 2.4%

    An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.

  2. 7.8CVE-2023-27949EPSS 0.3%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app terminatio…

  3. 7.8CVE-2023-27946EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously crafted file may lead to unex…

  4. 6.3CVE-2023-27945EPSS 0.2%

    This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.

  5. 7.8CVE-2023-27938EPSS 0.3%

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execu…

  6. 5.5CVE-2023-27929EPSS 0.2%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process mem…

  7. 6.5CVE-2023-23528EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS 16.4. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.

  8. 5.5CVE-2023-29942EPSS 0.2%

    llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.

  9. 5.5CVE-2023-29941EPSS 0.2%

    llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.

  10. 5.5CVE-2023-29939EPSS 0.2%

    llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).

  11. 5.5CVE-2023-29934EPSS 0.2%

    llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().

  12. 5.5CVE-2023-29933EPSS 0.2%

    llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.

  13. 5.5CVE-2023-21511EPSS 0.2%

    Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

  14. 5.5CVE-2023-21510EPSS 0.2%

    Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

  15. 5.5CVE-2023-21507EPSS 0.2%

    Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

  16. 6.5CVE-2022-43681EPSS 2.1%

    An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code re…

  17. 6.5CVE-2022-40318EPSS 2.0%

    An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or o…

  18. 6.5CVE-2022-40302EPSS 2.0%

    An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or o…

  19. 5.7CVE-2023-27892EPSS 0.5%

    Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_confirmExecTx() in ethereum_contracts.c can be used to reveal arbitrary microcontro…

  20. 5.5CVE-2022-33273EPSS 0.1%

    Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

  21. 7.5CVE-2022-40505EPSS 0.4%

    Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

  22. 7.5CVE-2023-30546EPSS 0.6%

    Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system in versions 4.8 and prior. The problem exists in the Conti…

  23. 6.0CVE-2023-20870EPSS 0.4%

    VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

  24. 6.6CVE-2023-25514EPSS 0.2%

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerabil…

  25. 6.6CVE-2023-25513EPSS 0.3%

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerabil…

  26. 6.6CVE-2023-25512EPSS 0.3%

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead t…

  27. 5.3CVE-2023-2226EPSS 0.4%

    Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files.  For this attack to succeed, the attacker n…

  28. 6.5CVE-2023-27353EPSS 0.6%

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within…

  29. 7.8CVE-2023-2176EPSS 0.2%

    A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escal…

  30. 5.5CVE-2023-22846EPSS 0.2%

    Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  31. 5.5CVE-2023-22354EPSS 0.2%

    Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  32. 5.5CVE-2023-22321EPSS 0.2%

    Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  33. 5.5CVE-2023-22295EPSS 0.2%

    Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  34. 5.9CVE-2023-1255EPSS 1.0%

    Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 6…

  35. 5.5CVE-2023-21080EPSS 0.09%

    In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not neede…

  36. 5.5CVE-2023-20935EPSS 0.09%

    In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl…

  37. 7.8CVE-2023-27906EPSS 0.3%

    A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution.

  38. 9.1CVE-2022-48312EPSS 0.4%

    The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity.

  39. 3.3CVE-2023-29383EPSS 0.4%

    In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list)…

  40. 7.5CVE-2023-29089EPSS 0.8%

    An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficie…

  41. 7.8CVE-2023-27915EPSS 0.2%

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in…

  42. 7.8CVE-2023-27912EPSS 0.2%

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context o…

  43. 7.8CVE-2023-26411EPSS 0.3%

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage…

  44. 7.8CVE-2023-26409EPSS 0.3%

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage…

  45. 7.8CVE-2023-26398EPSS 0.3%

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage…

  46. 7.5CVE-2022-40503EPSS 0.4%

    Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

  47. 5.5CVE-2022-33297EPSS 0.1%

    Information disclosure due to buffer overread in Linux sensors

  48. 7.5CVE-2022-33295EPSS 0.4%

    Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

  49. 7.5CVE-2022-33291EPSS 0.4%

    Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

  50. 7.5CVE-2022-33287EPSS 0.4%

    Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.