cve.bz

CWE-125: Out-of-bounds Read, page 116

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2022-4337EPSS 1.4%

    An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

  2. 7.5CVE-2022-38393EPSS 19%

    A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An at…

  3. 5.5CVE-2022-40519EPSS 0.1%

    Information disclosure due to buffer overread in Core

  4. 5.5CVE-2022-40518EPSS 0.1%

    Information disclosure due to buffer overread in Core

  5. 6.5CVE-2022-33286EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

  6. 6.5CVE-2022-33285EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

  7. 6.5CVE-2022-33284EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

  8. 6.5CVE-2022-33283EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

  9. 6.5CVE-2022-33255EPSS 0.4%

    Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

  10. 5.5CVE-2022-33253EPSS 0.2%

    Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.

  11. 5.5CVE-2022-33252EPSS 0.2%

    Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.

  12. 4.6CVE-2022-22079EPSS 0.2%

    Denial of service while processing fastboot flash command on mmc due to buffer over read

  13. 7.8CVE-2022-41613EPSS 0.2%

    Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitra…

  14. 7.5CVE-2021-46868EPSS 0.4%

    The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.

  15. 7.5CVE-2021-46867EPSS 0.4%

    The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.

  16. 4.4CVE-2022-4435EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

  17. 4.4CVE-2022-4434EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.

  18. 4.4CVE-2022-4433EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

  19. 4.4CVE-2022-4432EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

  20. 5.5CVE-2022-46457EPSS 0.3%

    NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

  21. 7.8CVE-2023-0049EPSS 0.6%

    Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

  22. 5.5CVE-2022-44446EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  23. 5.5CVE-2022-44445EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  24. 5.5CVE-2022-44443EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  25. 5.5CVE-2022-44442EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  26. 5.5CVE-2022-44441EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  27. 5.5CVE-2022-44440EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  28. 6.7CVE-2022-32641EPSS 0.1%

    In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  29. 4.4CVE-2022-32639EPSS 0.1%

    In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS074…

  30. 7.8CVE-2022-46360EPSS 0.3%

    Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.

  31. 7.8CVE-2022-41645EPSS 0.2%

    Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

  32. 5.4CVE-2021-21200EPSS 0.5%

    Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chrome security severity: Low)

  33. 7.8CVE-2022-42267EPSS 0.1%

    NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

  34. 7.8CVE-2022-42254EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure.

  35. 7.1CVE-2022-34684EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to data tampering or information disclosure.

  36. 7.1CVE-2022-34677EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.

  37. 7.8CVE-2022-34676EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.

  38. 7.3CVE-2022-34673EPSS 0.2%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.

  39. 7.5CVE-2021-38561EPSS 1.5%

    golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a deni…

  40. 9.1CVE-2022-28228EPSS 0.7%

    Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would allow him to read sensitive information from other memory locations or cause a crash.

  41. 8.1CVE-2022-47943EPSS 3.8%

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.

  42. 8.1CVE-2022-47940EPSS 1.5%

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.

  43. 6.5CVE-2022-47938EPSS 60%

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.

  44. 9.8CVE-2022-23547EPSS 1.0%

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread…

  45. 5.9CVE-2022-43596EPSS 1.2%

    An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide ma…

  46. 5.9CVE-2022-43592EPSS 1.2%

    An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious inpu…

  47. 7.5CVE-2022-41988EPSS 1.2%

    An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker c…

  48. 8.1CVE-2022-41981EPSS 1.1%

    A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execu…

  49. 3.3CVE-2022-41977EPSS 0.7%

    An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to …

  50. 5.5CVE-2022-41684EPSS 0.8%

    A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can l…