cve.bz

CWE-125: Out-of-bounds Read, page 114

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-25563EPSS 1.1%

    GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow conditio…

  2. 7.8CVE-2023-25140EPSS 0.2%

    A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All v…

  3. 3.3CVE-2023-24565EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end …

  4. 7.8CVE-2023-24559EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  5. 7.8CVE-2023-24558EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  6. 7.8CVE-2023-24557EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  7. 7.8CVE-2023-24556EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  8. 7.8CVE-2023-24555EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  9. 7.8CVE-2023-24554EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  10. 7.8CVE-2023-24553EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while pa…

  11. 7.8CVE-2023-24552EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsi…

  12. 5.5CVE-2023-0798EPSS 0.4%

    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.

  13. 5.5CVE-2023-0797EPSS 0.4%

    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libt…

  14. 5.5CVE-2023-0796EPSS 0.4%

    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.

  15. 5.5CVE-2023-0795EPSS 0.4%

    LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.

  16. 7.8CVE-2023-0817EPSS 0.4%

    Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.

  17. 7.8CVE-2023-22353EPSS 0.3%

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open…

  18. 7.8CVE-2023-22350EPSS 0.3%

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a…

  19. 7.8CVE-2023-22349EPSS 0.3%

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open …

  20. 7.8CVE-2023-22347EPSS 0.3%

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a s…

  21. 7.8CVE-2023-22346EPSS 0.3%

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a special…

  22. 5.5CVE-2022-47363EPSS 0.09%

    In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services.

  23. 5.5CVE-2022-47323EPSS 0.08%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  24. 7.5CVE-2022-40512EPSS 0.4%

    Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

  25. 7.5CVE-2022-34145EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

  26. 7.5CVE-2022-33306EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

  27. 7.5CVE-2022-33271EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

  28. 7.5CVE-2022-33229EPSS 0.4%

    Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

  29. 5.5CVE-2022-33221EPSS 0.1%

    Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

  30. 7.5CVE-2022-25738EPSS 0.4%

    Information disclosure in modem due to buffer over-red while performing checksum of packet received

  31. 7.5CVE-2022-25732EPSS 0.4%

    Information disclosure in modem due to buffer over read in dns client due to missing length check

  32. 7.5CVE-2022-25728EPSS 0.4%

    Information disclosure in modem due to buffer over-read while processing response from DNS server

  33. 7.8CVE-2023-21430EPSS 0.2%

    An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault.

  34. 6.5CVE-2022-48293EPSS 0.2%

    The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

  35. 6.5CVE-2022-48292EPSS 0.2%

    The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

  36. 8.8CVE-2023-0698EPSS 0.6%

    Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

  37. 4.4CVE-2023-20609EPSS 0.10%

    In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570864; Issue ID…

  38. 4.4CVE-2023-20606EPSS 0.10%

    In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS075711…

  39. 4.4CVE-2022-32595EPSS 0.1%

    In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  40. 4.3CVE-2023-23933EPSS 0.5%

    OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detec…

  41. 7.5CVE-2023-24977EPSS 1.2%

    Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apac…

  42. 6.5CVE-2022-39061EPSS 0.7%

    ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive conten…

  43. 4.4CVE-2022-40136EPSS 0.2%

    An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

  44. 4.4CVE-2022-40135EPSS 0.2%

    An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

  45. 4.4CVE-2022-40134EPSS 0.2%

    An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

  46. 5.5CVE-2022-48303EPSS 1.5%

    GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via …

  47. 7.8CVE-2022-42417EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  48. 5.5CVE-2022-42413EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  49. 5.5CVE-2022-42412EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  50. 5.5CVE-2022-42411EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…