cve.bz

CWE-125: Out-of-bounds Read, page 115

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2022-42409EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  2. 5.5CVE-2022-42407EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  3. 5.5CVE-2022-42406EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  4. 5.5CVE-2022-42404EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  5. 7.8CVE-2022-42402EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  6. 5.5CVE-2022-42401EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  7. 7.8CVE-2022-42399EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  8. 5.5CVE-2022-42398EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  9. 5.5CVE-2022-42397EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  10. 5.5CVE-2022-42393EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  11. 5.5CVE-2022-42392EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  12. 5.5CVE-2022-42391EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  13. 5.5CVE-2022-42390EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  14. 5.5CVE-2022-42389EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  15. 5.5CVE-2022-42388EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  16. 5.5CVE-2022-42387EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  17. 5.5CVE-2022-42386EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  18. 5.5CVE-2022-42385EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  19. 5.5CVE-2022-42384EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  20. 5.5CVE-2022-42383EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  21. 7.8CVE-2022-42379EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  22. 5.5CVE-2022-42376EPSS 0.3%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  23. 5.5CVE-2022-42375EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  24. 7.8CVE-2022-42372EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  25. 5.5CVE-2022-42369EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  26. 5.5CVE-2022-41153EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  27. 7.8CVE-2022-41152EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  28. 7.8CVE-2022-41150EPSS 0.4%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

  29. 5.5CVE-2022-41146EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  30. 5.5CVE-2022-41145EPSS 0.4%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  31. 6.8CVE-2023-0396EPSS 0.4%

    A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses.

  32. 5.3CVE-2023-22485EPSS 0.7%

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe…

  33. 5.5CVE-2023-21614EPSS 2.5%

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could le…

  34. 5.5CVE-2023-21613EPSS 2.5%

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could le…

  35. 5.5CVE-2023-21585EPSS 2.5%

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could le…

  36. 5.5CVE-2023-21581EPSS 2.4%

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could le…

  37. 5.5CVE-2023-21603EPSS 0.3%

    Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati…

  38. 6.5CVE-2022-47881EPSS 0.7%

    Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.

  39. 7.4CVE-2022-47630EPSS 0.6%

    Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sen…

  40. 5.5CVE-2023-21599EPSS 0.3%

    Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as…

  41. 5.5CVE-2023-21592EPSS 0.3%

    Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a…

  42. 5.5CVE-2023-21591EPSS 0.3%

    Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a…

  43. 5.5CVE-2021-46768EPSS 0.2%

    Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.

  44. 5.5CVE-2023-21776EPSS 1.0%

    Windows Kernel Information Disclosure Vulnerability

  45. 7.8CVE-2023-21772EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  46. 7.1CVE-2023-21741EPSS 1.8%

    Microsoft Office Visio Information Disclosure Vulnerability

  47. 5.3CVE-2023-21682EPSS 1.4%

    Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

  48. 7.5CVE-2023-21539EPSS 1.2%

    Windows Authentication Remote Code Execution Vulnerability

  49. 4.7CVE-2023-21536EPSS 0.4%

    Event Tracing for Windows Information Disclosure Vulnerability

  50. 9.8CVE-2022-4338EPSS 1.4%

    An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.