CWE-125: Out-of-bounds Read, page 36
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Ask an AI about CWE-125
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2026-45604EPSS 0.3%
Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.
- 3.3CVE-2026-45485EPSS 0.4%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-45457EPSS 0.4%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- 4.3CVE-2026-45455EPSS 0.6%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- 8.2CVE-2026-44822EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2026-44821EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-44820EPSS 0.4%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 5.5CVE-2026-44814EPSS 0.3%
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-44808EPSS 0.3%
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-42968EPSS 0.4%
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
- 5.3CVE-2026-42914EPSS 0.8%
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
- 7.5CVE-2026-42908EPSS 0.9%
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-42837EPSS 0.3%
Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
- 6.2CVE-2026-42771EPSS 0.2%
Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out of bounds read can happen. Impact summary: This out of bounds read wil…
- 7.5CVE-2026-34180EPSS 1.0%
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer ov…
- 6.5CVE-2026-11786EPSS 0.2%
A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrument…
- 7.5CVE-2026-11690EPSS 0.2%
Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security…
- 7.5CVE-2026-11667EPSS 0.2%
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 4.3CVE-2026-11665EPSS 0.2%
Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- 8.8CVE-2026-11645KEVEPSS 2.4%
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- 6.1CVE-2026-40215EPSS 0.4%
A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.
- 8.3CVE-2026-46307EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an array-index-out-of-bounds access as > shown by the UBSAN kernel message: > UBSAN:…
- 7.1CVE-2026-46293EPSS 0.1%
In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds access during registration of the last two outputs. This ou…
- 7.3CVE-2026-44185EPSS 0.7%
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, w…
- 6.5CVE-2026-43951EPSS 0.5%
Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.
- 6.5CVE-2026-48112EPSS 0.3%
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. Wh…
- 7.1CVE-2026-48111EPSS 2.2%
7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parser(CPP/7zip/Archive/UefiHand…
- 4.2CVE-2026-48104EPSS 0.2%
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by a sparsely populated index array. In the SquashFS handler, _blockToNode is all…
- 7.1CVE-2026-48103EPSS 2.2%
7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging) archive handler's security descriptor lookup. In CHandler::GetSecurity (CPP/7zip…
- 4.3CVE-2026-48102EPSS 0.2%
7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifier Descriptor parser. In CFileId::Parse (CPP/7zip/Archive/U…
- 8.1CVE-2026-48092EPSS 2.7%
7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function…
- 5.5CVE-2026-50262EPSS 0.1%
An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding the request buffer, leading to informati…
- 5.9CVE-2026-21038EPSS 0.1%
Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory.
- 8.8CVE-2026-11301EPSS 0.2%
Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)
- 6.5CVE-2026-11299EPSS 0.2%
Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
- 8.8CVE-2026-11279EPSS 0.3%
Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
- 8.3CVE-2026-11256EPSS 0.2%
Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
- 8.8CVE-2026-11191EPSS 0.3%
Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
- 6.5CVE-2026-11183EPSS 0.2%
Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)
- 6.5CVE-2026-11160EPSS 0.2%
Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
- 8.1CVE-2026-11111EPSS 0.2%
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
- 6.5CVE-2026-11096EPSS 0.2%
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
- 8.8CVE-2026-11091EPSS 0.2%
Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
- 6.5CVE-2026-11090EPSS 0.3%
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
- 8.8CVE-2026-11077EPSS 0.3%
Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
- 6.5CVE-2026-11075EPSS 0.2%
Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
- 9.6CVE-2026-11061EPSS 0.3%
Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
- 6.5CVE-2026-11051EPSS 0.2%
Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
- 8.1CVE-2026-11015EPSS 0.3%
Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
- 6.5CVE-2026-11006EPSS 0.3%
Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)