CWE-125: Out-of-bounds Read, page 30
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Ask an AI about CWE-125
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.1CVE-2026-57073EPSS 0.7%
HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offse…
- 6.5CVE-2026-47729EPSS 1.5%
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in …
- 5.5CVE-2026-45612EPSS 0.2%
rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56…
- 5.1CVE-2026-38754EPSS 0.2%
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
- 5.4CVE-2026-62353EPSS 0.4%
TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte…
- 7.5CVE-2026-62351EPSS 0.4%
TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read STransCompMsg.contLen when pHead->comp == 1 without first validating that the R…
- 8.8CVE-2026-10673EPSS 0.4%
The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by copying device-supplied 64-byte data chunks into a fixed static buffer ctx…
- 6.3CVE-2026-60065EPSS 0.4%
When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap bu…
- 2.1CVE-2026-61862EPSS 0.1%
ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printe…
- 5.6CVE-2026-15030EPSS 0.1%
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request…
- 5.5CVE-2026-47979EPSS 0.3%
Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user i…
- 6.5CVE-2026-15714EPSS 0.4%
An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict …
- 8.6CVE-2026-15720EPSS 0.5%
In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.
- 5.9CVE-2026-15712EPSS 0.6%
A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the "Additional Debug Data" p…
- 7.5CVE-2026-58539EPSS 0.9%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
- 7.1CVE-2026-58529EPSS 1.0%
Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.
- 4.6CVE-2026-58528EPSS 0.5%
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
- 8.8CVE-2026-57094EPSS 0.8%
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- 3.3CVE-2026-57085EPSS 0.4%
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-56195EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-56192EPSS 0.6%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 6.5CVE-2026-56186EPSS 1.1%
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
- 7.8CVE-2026-56176EPSS 0.3%
Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- 7.1CVE-2026-55898EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- 3.3CVE-2026-55139EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.1CVE-2026-55122EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-55121EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-55058EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 6.5CVE-2026-55054EPSS 0.9%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2026-55050EPSS 0.6%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-55047EPSS 0.6%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-55046EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- 8.4CVE-2026-55045EPSS 0.4%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
- 7.8CVE-2026-55044EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 3.3CVE-2026-55035EPSS 0.6%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-55031EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 5.5CVE-2026-55028EPSS 0.6%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-55027EPSS 0.6%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-55023EPSS 0.6%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 6.5CVE-2026-54126EPSS 0.9%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
- 7.1CVE-2026-50682EPSS 0.9%
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.
- 7.8CVE-2026-50670EPSS 0.3%
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 3.3CVE-2026-50665EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-50498EPSS 0.4%
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- 7.5CVE-2026-50496EPSS 1.2%
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-50491EPSS 0.3%
Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-50470EPSS 1.0%
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2026-50463EPSS 1.0%
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
- 4.6CVE-2026-50453EPSS 0.5%
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
- 5.5CVE-2026-50437EPSS 0.4%
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.