cve.bz

CWE-125: Out-of-bounds Read, page 71

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2025-24149EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsin…

  2. 6.3CVE-2025-24115EPSS 0.3%

    A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.

  3. 5.5CVE-2025-24092EPSS 0.3%

    This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read sensitive location information.

  4. 5.3CVE-2024-54518EPSS 0.2%

    The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.

  5. 5.5CVE-2024-54507EPSS 0.9%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An attacker with user privileges may be able to read kernel memory.

  6. 6.5CVE-2024-54478EPSS 0.6%

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2, macOS Sonoma 14.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing malicious…

  7. 7.5CVE-2025-0612EPSS 0.5%

    Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  8. 7.5CVE-2024-24417EPSS 0.6%

    The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulne…

  9. 4.3CVE-2025-21530EPSS 0.5%

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker wit…

  10. 7.1CVE-2024-57945EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: ((struct page *)VMEMMAP_START - (phys_…

  11. 7.1CVE-2024-57928EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfs_read_to_pagecache() gets an error from either ->prepare_read() or from netfs_prepare_read_iterator(), it needs to d…

  12. 7.1CVE-2025-21647EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an und…

  13. 7.8CVE-2018-9464EPSS 0.1%

    In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e…

  14. 4.4CVE-2018-9383EPSS 0.1%

    In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi…

  15. 4.8CVE-2025-0518EPSS 0.4%

    Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C…

  16. 8.8CVE-2025-0437EPSS 0.3%

    Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  17. 7.5CVE-2024-48855EPSS 0.4%

    Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.

  18. 5.5CVE-2025-21374EPSS 0.6%

    Windows CSC Service Information Disclosure Vulnerability

  19. 6.6CVE-2025-21341EPSS 0.7%

    Windows Digital Media Elevation of Privilege Vulnerability

  20. 6.6CVE-2025-21327EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  21. 6.6CVE-2025-21324EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  22. 6.6CVE-2025-21310EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  23. 6.6CVE-2025-21265EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  24. 6.6CVE-2025-21263EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  25. 6.6CVE-2025-21261EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  26. 6.6CVE-2025-21260EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  27. 6.6CVE-2025-21258EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  28. 5.5CVE-2025-21257EPSS 0.7%

    Windows WLAN AutoConfig Service Information Disclosure Vulnerability

  29. 6.6CVE-2025-21256EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  30. 6.6CVE-2025-21255EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  31. 6.6CVE-2025-21249EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  32. 8.8CVE-2025-21246EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  33. 8.8CVE-2025-21245EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  34. 6.6CVE-2025-21232EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  35. 6.6CVE-2025-21229EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  36. 6.6CVE-2025-21228EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  37. 6.6CVE-2025-21227EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  38. 6.6CVE-2025-21226EPSS 0.9%

    Windows Digital Media Elevation of Privilege Vulnerability

  39. 4.6CVE-2025-21215EPSS 0.8%

    Secure Boot Security Feature Bypass Vulnerability

  40. 8.8CVE-2025-21178EPSS 1.6%

    Visual Studio Remote Code Execution Vulnerability

  41. 7.8CVE-2024-13169EPSS 0.4%

    An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

  42. 7.5CVE-2024-46670EPSS 0.6%

    An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger …

  43. 6.5CVE-2024-36504EPSS 0.7%

    An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of servic…

  44. 7.1CVE-2024-52332EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, other…

  45. 7.1CVE-2024-41935EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of exte…

  46. 5.5CVE-2024-57822EPSS 0.3%

    In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().

  47. 8.2CVE-2025-21598EPSS 0.7%

    An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based attacker to send malformed BGP packets to a device configured with packet receiv…

  48. 7.1CVE-2025-21600EPSS 0.3%

    An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd …

  49. 9.1CVE-2024-35532EPSS 0.5%

    An XML External Entity (XXE) injection vulnerability in Intersec Geosafe-ea 2022.12, 2022.13, and 2022.14 allows attackers to perform arbitrary file reading under the privileges of the running process, make SSRF requests, or cause a Denial…

  50. 5.5CVE-2024-45070EPSS 0.2%

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause information leak through out-of-bounds Read.