CWE-125: Out-of-bounds Read, page 118
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Related attack patterns (CAPEC): 1
- CAPEC-540 Overread Buffers Likelihood: Low · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.
Ask an AI about CWE-125
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2022-32942EPSS 0.4%
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges.
- 5.5CVE-2022-32916EPSS 0.2%
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 16. An app may be able to disclose kernel memory.
- 8.8CVE-2022-46344EPSS 2.9%
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can…
- 7.8CVE-2022-46349EPSS 0.5%
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All v…
- 3.3CVE-2022-45484EPSS 0.2%
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.9), Teamcenter Visualization V13.3 (All versions < …
- 7.8CVE-2022-41286EPSS 0.3%
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < …
- 7.8CVE-2022-41284EPSS 0.3%
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < …
- 7.8CVE-2022-41282EPSS 0.3%
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < …
- 7.8CVE-2022-41281EPSS 0.3%
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < …
- 8.1CVE-2022-33268EPSS 0.5%
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Sn…
- 7.5CVE-2022-33235EPSS 0.4%
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consu…
- 4.4CVE-2022-20498EPSS 1.2%
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for ex…
- 9.8CVE-2022-20473EPSS 8.9%
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for e…
- 9.8CVE-2022-20472EPSS 6.6%
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for e…
- 5.5CVE-2022-20471EPSS 0.1%
In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not …
- 6.5CVE-2022-20468EPSS 0.1%
In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is…
- 5.5CVE-2022-23523EPSS 0.2%
In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors …
- 5.5CVE-2022-44648EPSS 0.7%
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to ex…
- 5.5CVE-2022-44647EPSS 0.7%
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to ex…
- 5.3CVE-2022-20688EPSS 1.0%
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discove…
- 9.1CVE-2022-23493EPSS 1.0%
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close() function. There a…
- 9.1CVE-2022-23483EPSS 0.9%
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There are no known workarou…
- 9.1CVE-2022-23482EPSS 0.8%
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE() function. There are no know…
- 9.1CVE-2022-23481EPSS 0.8%
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_caps_process_confirm_active() function. There are no known…
- 9.1CVE-2022-46741EPSS 0.7%
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
- 9.1CVE-2022-41910EPSS 0.4%
TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an…
- 9.1CVE-2022-41902EPSS 0.5%
TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an…
- 5.5CVE-2022-42781EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42780EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42779EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42774EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42773EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 3.3CVE-2022-42769EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 4.3CVE-2022-42768EPSS 0.4%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42762EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42761EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-42759EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 3.3CVE-2022-42758EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 3.3CVE-2022-42757EPSS 0.1%
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- 5.5CVE-2022-39130EPSS 0.1%
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- 6.5CVE-2022-35260EPSS 2.7%
curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a …
- 4.6CVE-2022-23467EPSS 0.4%
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially by…
- 9.8CVE-2022-45315EPSS 1.4%
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet.
- 8.8CVE-2022-45313EPSS 1.6%
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.
- 5.4CVE-2022-46149EPSS 0.9%
Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 a…
- 6.5CVE-2022-4144EPSS 0.3%
An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar s…
- 9.1CVE-2022-45909EPSS 1.1%
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
- 7.8CVE-2022-31617EPSS 0.3%
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escala…
- 7.1CVE-2022-31616EPSS 0.2%
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of servi…
- 7.1CVE-2022-31612EPSS 0.2%
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash …