cve.bz

CWE-125: Out-of-bounds Read, page 60

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2025-7261EPSS 0.3%

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interactio…

  2. 7.8CVE-2025-7252EPSS 0.3%

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interactio…

  3. 7.8CVE-2025-7251EPSS 0.3%

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interactio…

  4. 7.8CVE-2025-7250EPSS 0.3%

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interactio…

  5. 7.8CVE-2025-7247EPSS 0.2%

    IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interactio…

  6. 7.8CVE-2025-7242EPSS 0.3%

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interactio…

  7. 5.5CVE-2025-7233EPSS 0.2%

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of IrfanView CADImage Plugin. User i…

  8. 6.9CVE-2025-54070EPSS 0.4%

    OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 5.2.0 and prior to version 5.4.0, the `lastIndexOf(bytes,byte,uint256)` function of the `Bytes.sol` library may access uninitialized memory when…

  9. 7.8CVE-2025-0831EPSS 0.2%

    Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT …

  10. 7.5CVE-2025-53019EPSS 0.6%

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in …

  11. 9.8CVE-2025-53014EPSS 0.7%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one…

  12. 7.5CVE-2024-42646EPSS 0.5%

    A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service (DoS) via crafted messages.

  13. 6.3CVE-2025-7464EPSS 0.5%

    A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack rem…

  14. 7.1CVE-2025-38342EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value require…

  15. 7.1CVE-2025-38340EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test KASAN reported out of bounds access - cs_dsp_mock_bin_add_name_or_info(), because the source string length was…

  16. 7.1CVE-2025-38330EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock…

  17. 7.1CVE-2025-38329EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) KASAN reported out of bounds access - cs_dsp_mock_wmfw_add_info(), because the source string lengt…

  18. 7.1CVE-2025-38320EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() KASAN reports a stack-out-of-bounds read in regs_get_kernel_stack_nth(). Call Trace: [ 97.28…

  19. 7.1CVE-2025-38292EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freein…

  20. 7.1CVE-2025-38286EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. Th…

  21. 7.1CVE-2025-38249EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() In snd_usb_get_audioformat_uac3(), the length value returned from snd_usb_ctl_msg() is used dir…

  22. 5.5CVE-2025-49525EPSS 0.2%

    Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malici…

  23. 5.5CVE-2025-30313EPSS 0.2%

    Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malici…

  24. 5.5CVE-2025-27165EPSS 0.2%

    Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malici…

  25. 5.5CVE-2025-43584EPSS 0.3%

    Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicio…

  26. 5.5CVE-2025-47135EPSS 0.2%

    Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of t…

  27. 8.4CVE-2025-49696EPSS 0.6%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  28. 7.8CVE-2025-49689EPSS 0.7%

    Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  29. 8.8CVE-2025-49687EPSS 0.4%

    Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

  30. 6.5CVE-2025-49681EPSS 1.2%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  31. 6.5CVE-2025-49671EPSS 1.2%

    Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  32. 5.5CVE-2025-49658EPSS 0.5%

    Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally.

  33. 8.8CVE-2025-49657EPSS 1.1%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  34. 8.6CVE-2025-48822EPSS 0.7%

    Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

  35. 7.8CVE-2025-48816EPSS 0.4%

    Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.

  36. 5.5CVE-2025-48812EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  37. 5.7CVE-2025-48002EPSS 0.7%

    Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network.

  38. 7.8CVE-2025-47996EPSS 0.4%

    Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

  39. 6.5CVE-2025-47978EPSS 2.1%

    Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

  40. 5.5CVE-2025-43587EPSS 0.3%

    After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  41. 5.5CVE-2025-21168EPSS 0.2%

    Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Explo…

  42. 5.5CVE-2025-21167EPSS 0.2%

    Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Explo…

  43. 7.5CVE-2025-27057EPSS 0.2%

    Transient DOS while handling beacon frames with invalid IE header length.

  44. 7.8CVE-2025-27055EPSS 0.1%

    Memory corruption during the image encoding process.

  45. 7.5CVE-2025-21454EPSS 0.2%

    Transient DOS while processing received beacon frame.

  46. 7.5CVE-2025-21449EPSS 0.2%

    Transient DOS may occur while processing malformed length field in SSID IEs.

  47. 7.5CVE-2025-21446EPSS 0.2%

    Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

  48. 8.2CVE-2025-21427EPSS 0.2%

    Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

  49. 7.3CVE-2025-40740EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This coul…

  50. 7.3CVE-2025-40739EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This coul…