cve.bz

CWE-125: Out-of-bounds Read, page 113

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-24862EPSS 0.5%

    Windows Secure Channel Denial of Service Vulnerability

  2. 7.8CVE-2023-23418EPSS 0.4%

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  3. 7.8CVE-2023-23399ExploitEPSS 2.5%

    Microsoft Excel Remote Code Execution Vulnerability

  4. 7.8CVE-2023-27405EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This …

  5. 7.8CVE-2023-27402EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This …

  6. 7.8CVE-2023-27401EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This …

  7. 4.4CVE-2023-0193EPSS 0.2%

    NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosu…

  8. 5.5CVE-2022-47458EPSS 0.09%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  9. 5.5CVE-2022-47456EPSS 0.09%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  10. 5.5CVE-2022-47455EPSS 0.09%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  11. 7.5CVE-2022-40535EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while sending a packet to device.

  12. 7.5CVE-2022-33309EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

  13. 7.8CVE-2023-0621EPSS 0.2%

    Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated da…

  14. 9.9CVE-2023-26489EPSS 1.3%

    wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of W…

  15. 7.8CVE-2023-22421EPSS 0.3%

    Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read.…

  16. 7.8CVE-2023-22419EPSS 0.2%

    Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When processing a comment block in stage information, the end of data cannot be verified a…

  17. 5.5CVE-2022-4645EPSS 0.4%

    LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

  18. 5.9CVE-2023-27371EPSS 1.3%

    GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious…

  19. 5.5CVE-2023-1018EPSS 5.6%

    An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or …

  20. 7.5CVE-2023-20948EPSS 0.4%

    In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not n…

  21. 5.5CVE-2023-23502EPSS 0.2%

    An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memor…

  22. 7.8CVE-2022-42833EPSS 0.3%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

  23. 7.5CVE-2022-32830EPSS 0.6%

    An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and iPadOS 15.6. Processing a maliciously crafted image may lead to disclosure of user information.

  24. 7.1CVE-2023-26607EPSS 0.6%

    In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.

  25. 6.5CVE-2021-35369EPSS 0.6%

    Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function.

  26. 4.9CVE-2022-4203EPSS 1.4%

    A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious …

  27. 5.5CVE-2022-46440EPSS 0.3%

    ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.

  28. 5.5CVE-2021-33367EPSS 0.3%

    Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file.

  29. 7.5CVE-2023-26253EPSS 0.9%

    In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

  30. 6.5CVE-2021-32847EPSS 0.4%

    HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the ho…

  31. 5.5CVE-2023-22233EPSS 0.3%

    After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such…

  32. 5.5CVE-2023-22231EPSS 0.3%

    Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations …

  33. 5.5CVE-2023-21620EPSS 0.3%

    FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as A…

  34. 5.5CVE-2023-21583EPSS 0.3%

    Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations …

  35. 5.5CVE-2023-21578EPSS 0.3%

    Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as A…

  36. 5.5CVE-2023-21577EPSS 0.3%

    Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as A…

  37. 7.5CVE-2022-35729EPSS 0.7%

    Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.

  38. 7.8CVE-2022-34864EPSS 0.2%

    Out-of-bounds read in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

  39. 7.8CVE-2022-34346EPSS 0.2%

    Out-of-bounds read in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

  40. 5.5CVE-2022-30531EPSS 0.2%

    Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access.

  41. 4.4CVE-2022-30339EPSS 0.2%

    Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access.

  42. 7.5CVE-2023-21819EPSS 31%

    Windows Secure Channel Denial of Service Vulnerability

  43. 8.8CVE-2023-21798EPSS 1.2%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  44. 5.5CVE-2023-21714EPSS 0.6%

    Microsoft Office Information Disclosure Vulnerability

  45. 7.5CVE-2023-21702EPSS 1.7%

    Windows iSCSI Service Denial of Service Vulnerability

  46. 5.3CVE-2023-21699EPSS 1.1%

    Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

  47. 5.7CVE-2023-21693EPSS 1.4%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  48. 7.5CVE-2023-21691EPSS 1.4%

    Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

  49. 5.5CVE-2023-21687EPSS 0.5%

    HTTP.sys Information Disclosure Vulnerability

  50. 7.5CVE-2023-25567EPSS 1.1%

    GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of th…