cve.bz

CWE-125: Out-of-bounds Read, page 6

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Ask an AI about CWE-125

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.1CVE-2026-110712EPSS 0.4%

    libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man…

  2. 4.8CVE-2026-110661EPSS 0.2%

    CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminat…

  3. 4.8CVE-2026-110660EPSS 0.2%

    vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c, whose bit reader refills without checking the data_u32 array end. Attackers can supply crafted .s14 or .sss files that…

  4. 6.9CVE-2026-110658EPSS 0.7%

    Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a…

  5. 2.3CVE-2026-110656EPSS 0.3%

    miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check after advancing past ':'. A malicious or spoofed UPnP gateway …

  6. 2.3CVE-2026-110655EPSS 0.3%

    miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof…

  7. 4.8CVE-2026-110606EPSS 0.2%

    LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader() caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC…

  8. 6.9CVE-2026-110598EPSS 0.2%

    Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB file…

  9. 6.9CVE-2026-110597EPSS 0.2%

    Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR f…

  10. 4.8CVE-2024-58392EPSS 0.2%

    PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. Attackers can supply a crafted …

  11. 3.3CVE-2026-88842EPSS 0.2%

    A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second packa…

  12. 7.1CVE-2026-88964EPSS 0.4%

    An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options

  13. 5.8CVE-2026-84420EPSS 0.1%

    Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.

  14. 5.3CVE-2026-88086EPSS 0.4%

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

  15. 7.7CVE-2026-88081EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  16. 7.7CVE-2026-85888EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  17. 6.0CVE-2026-78628EPSS 0.1%

    The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can ca…

  18. 4.9CVE-2026-67628EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  19. 5.5CVE-2026-103825EPSS 0.1%

    Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requir…

  20. 5.5CVE-2026-103822EPSS 0.1%

    Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requir…

  21. 5.5CVE-2026-100131EPSS 0.1%

    Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue require…

  22. 5.5CVE-2026-100130EPSS 0.1%

    Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue require…

  23. 5.5CVE-2026-100126EPSS 0.1%

    Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interact…

  24. 5.5CVE-2026-103853EPSS 0.2%

    Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user inter…

  25. 5.5CVE-2026-103850EPSS 0.1%

    Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires…

  26. 7.8CVE-2026-103842EPSS 0.2%

    Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code …

  27. 7.8CVE-2026-103841EPSS 0.2%

    Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code …

  28. 7.8CVE-2026-103840EPSS 0.2%

    Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code …

  29. 6.5CVE-2026-97844EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  30. 6.5CVE-2026-97843EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  31. 6.5CVE-2026-97842EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  32. 6.5CVE-2026-97841EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  33. 6.5CVE-2026-97840EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  34. 6.5CVE-2026-97839EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  35. 6.5CVE-2026-97838EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  36. 6.5CVE-2026-97837EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  37. 6.5CVE-2026-97836EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  38. 6.5CVE-2026-97835EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  39. 6.5CVE-2026-97834EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  40. 6.5CVE-2026-97833EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  41. 6.5CVE-2026-97832EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  42. 6.5CVE-2026-97831EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  43. 6.5CVE-2026-97829EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  44. 6.5CVE-2026-97827EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  45. 6.5CVE-2026-97826EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  46. 6.5CVE-2026-97825EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  47. 6.5CVE-2026-97824EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  48. 6.5CVE-2026-97823EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  49. 6.5CVE-2026-97822EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  50. 6.5CVE-2026-97821EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.