CWE-125: Out-of-bounds Read, page 125
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Related attack patterns (CAPEC): 1
- CAPEC-540 Overread Buffers Likelihood: Low · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.
Ask an AI about CWE-125
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2022-34283EPSS 1.1%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vu…
- 5.5CVE-2022-34282EPSS 1.1%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vu…
- 7.8CVE-2022-34281EPSS 1.4%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vu…
- 7.8CVE-2022-34280EPSS 1.4%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vu…
- 7.8CVE-2022-34279EPSS 1.4%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vu…
- 7.8CVE-2022-34278EPSS 1.4%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. This could allow an attacker to ex…
- 7.8CVE-2022-34277EPSS 1.4%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. This could allow an attacker to ex…
- 7.8CVE-2022-34272EPSS 1.4%
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vu…
- 4.4CVE-2022-21769EPSS 0.1%
In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673…
- 5.5CVE-2022-2301EPSS 0.7%
Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.
- 7.1CVE-2022-2287EPSS 1.4%
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
- 7.8CVE-2022-2286EPSS 1.4%
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
- 6.5CVE-2022-32325EPSS 1.0%
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- 7.8CVE-2022-2257EPSS 1.4%
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
- 7.5CVE-2022-33021EPSS 1.1%
CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.
- 5.5CVE-2021-40606EPSS 0.7%
The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
- 7.5CVE-2021-33650EPSS 0.9%
When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside of bounds of inputs which allocated from heap buffers.
- 7.5CVE-2021-33649EPSS 0.9%
When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from he…
- 7.5CVE-2021-33648EPSS 0.9%
When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.
- 7.8CVE-2022-2206EPSS 1.4%
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
- 6.5CVE-2022-32141EPSS 1.0%
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interact…
- 6.5CVE-2022-32139EPSS 1.0%
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.
- 7.8CVE-2022-2183EPSS 1.5%
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
- 8.8CVE-2022-34300EPSS 1.5%
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
- 8.1CVE-2022-34299EPSS 1.4%
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.
- 7.8CVE-2022-2175EPSS 1.3%
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
- 7.8CVE-2022-27869EPSS 0.8%
A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.
- 7.8CVE-2022-1720EPSS 2.2%
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
- 7.8CVE-2022-2126EPSS 1.6%
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
- 7.8CVE-2022-2124EPSS 1.6%
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
- 7.8CVE-2014-125017EPSS 0.5%
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes I…
- 5.3CVE-2022-25872EPSS 1.1%
All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.
- 7.8CVE-2022-30651EPSS 2.4%
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker coul…
- 7.8CVE-2022-27531EPSS 0.8%
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in th…
- 7.8CVE-2022-30549EPSS 0.9%
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted…
- 7.8CVE-2022-30546EPSS 0.8%
Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a …
- 5.5CVE-2022-30669EPSS 2.1%
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigat…
- 5.5CVE-2022-30668EPSS 2.1%
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigat…
- 5.5CVE-2022-30667EPSS 2.1%
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigat…
- 5.5CVE-2022-30666EPSS 2.1%
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigat…
- 5.5CVE-2022-28850EPSS 1.9%
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl…
- 4.4CVE-2022-20208EPSS 0.1%
In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for e…
- 6.7CVE-2022-20201EPSS 0.1%
In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for …
- 4.4CVE-2022-20198EPSS 0.1%
In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction…
- 4.4CVE-2022-20174EPSS 0.1%
In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exp…
- 4.4CVE-2022-20165EPSS 0.1%
In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Prod…
- 4.4CVE-2022-20162EPSS 0.1%
In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit…
- 4.4CVE-2022-20159EPSS 0.1%
In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is n…
- 4.6CVE-2022-20132EPSS 0.2%
In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, …
- 7.5CVE-2022-20131EPSS 1.0%
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not ne…