cve.bz

CWE-125: Out-of-bounds Read, page 70

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 3.3CVE-2024-53872EPSS 0.3%

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a…

  2. 3.3CVE-2024-53871EPSS 0.3%

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a p…

  3. 3.3CVE-2024-53870EPSS 0.3%

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a…

  4. 9.1CVE-2025-1675EPSS 0.4%

    The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

  5. 8.2CVE-2025-1674EPSS 0.4%

    A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.

  6. 8.2CVE-2025-1673EPSS 0.4%

    A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.

  7. 7.8CVE-2025-0591EPSS 0.2%

    Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.

  8. 5.3CVE-2025-23406EPSS 0.4%

    Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed.

  9. 3.7CVE-2023-34401EPSS 0.3%

    Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker c…

  10. 8.8CVE-2025-0911EPSS 0.5%

    PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  11. 8.8CVE-2025-0909EPSS 0.5%

    PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  12. 8.8CVE-2025-0908EPSS 0.6%

    PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  13. 8.8CVE-2025-0907EPSS 0.5%

    PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  14. 8.8CVE-2025-0906EPSS 0.5%

    PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  15. 8.8CVE-2025-0905EPSS 0.5%

    PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  16. 8.8CVE-2025-0904EPSS 0.5%

    PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  17. 8.8CVE-2025-0902EPSS 0.5%

    PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is …

  18. 8.8CVE-2025-0901EPSS 0.6%

    PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exp…

  19. 7.8CVE-2024-12551EPSS 0.4%

    Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User in…

  20. 7.8CVE-2024-12550EPSS 0.3%

    Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF…

  21. 7.8CVE-2024-12549EPSS 0.4%

    Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User in…

  22. 5.5CVE-2025-21383EPSS 1.0%

    Microsoft Excel Information Disclosure Vulnerability

  23. 6.5CVE-2025-21254EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  24. 6.5CVE-2025-21216EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  25. 6.5CVE-2025-21212EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  26. 4.8CVE-2025-21179EPSS 0.7%

    DHCP Client Service Denial of Service Vulnerability

  27. 5.5CVE-2025-21124EPSS 0.3%

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  28. 6.0CVE-2024-54090EPSS 0.4%

    A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain an out-of-bounds read in the memory dump fu…

  29. 7.8CVE-2025-21687EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used t…

  30. 7.5CVE-2024-24911EPSS 0.4%

    In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not p…

  31. 9.1CVE-2024-57958EPSS 0.2%

    Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

  32. 7.5CVE-2024-57956EPSS 0.2%

    Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability.

  33. 8.7CVE-2025-24497EPSS 0.4%

    When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  34. 6.7CVE-2025-20905EPSS 0.2%

    Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory.

  35. 4.4CVE-2025-20901EPSS 0.2%

    Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory.

  36. 5.5CVE-2025-20891EPSS 0.1%

    Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

  37. 5.5CVE-2025-20887EPSS 0.1%

    Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

  38. 9.8CVE-2024-49839EPSS 0.3%

    Memory corruption during management frame processing due to mismatch in T2LM info element.

  39. 7.5CVE-2024-49838EPSS 0.3%

    Information disclosure while parsing the OCI IE with invalid length.

  40. 5.5CVE-2024-38417EPSS 0.1%

    Information disclosure while processing IO control commands.

  41. 5.5CVE-2024-38416EPSS 0.1%

    Information disclosure during audio playback.

  42. 5.5CVE-2024-38414EPSS 0.1%

    Information disclosure while processing information on firmware image during core initialization.

  43. 7.5CVE-2024-38404EPSS 0.3%

    Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

  44. 3.9CVE-2025-20643EPSS 0.10%

    In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor has already obtained the System privilege.…

  45. 4.3CVE-2025-20640EPSS 0.10%

    In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interactio…

  46. 5.7CVE-2017-13318EPSS 0.1%

    In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is neede…

  47. 5.7CVE-2017-13317EPSS 0.1%

    In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interact…

  48. 3.3CVE-2024-0149EPSS 0.2%

    NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure.

  49. 6.5CVE-2025-24162EPSS 1.0%

    This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an …

  50. 5.5CVE-2025-24149EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsin…