cve.bz

CWE-125: Out-of-bounds Read, page 72

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-48457ExploitEPSS 3.1%

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Ne…

  2. 7.5CVE-2024-48456ExploitEPSS 17%

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Ne…

  3. 5.5CVE-2024-45559EPSS 0.1%

    Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

  4. 7.5CVE-2024-45558EPSS 0.4%

    Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

  5. 7.8CVE-2024-45548EPSS 0.09%

    Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

  6. 7.8CVE-2024-45546EPSS 0.09%

    Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

  7. 5.5CVE-2024-43063EPSS 0.1%

    information disclosure while invoking the mailbox read API.

  8. 5.5CVE-2024-33067EPSS 0.1%

    Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

  9. 5.5CVE-2024-33061EPSS 0.1%

    Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.

  10. 5.5CVE-2024-23366EPSS 0.1%

    Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

  11. 5.5CVE-2024-53839EPSS 0.08%

    In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not neede…

  12. 7.5CVE-2024-53834EPSS 0.3%

    In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interac…

  13. 7.8CVE-2024-12751EPSS 0.4%

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit t…

  14. 7.1CVE-2024-56721EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array requires an empty entry at the end. Otherwise x86_match_cpu_with_stepping() will…

  15. 6.3CVE-2024-56706EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU hardware is done at first event creation and is protected by a pair of mutex_lo…

  16. 7.5CVE-2021-22484EPSS 0.3%

    Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM).

  17. 5.3CVE-2020-1824EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  18. 5.3CVE-2020-1823EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  19. 5.3CVE-2020-1822EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  20. 5.3CVE-2020-1821EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  21. 5.3CVE-2020-1820EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  22. 6.0CVE-2024-56662EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Fix an issue detected by syzbot with KASAN: BUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/ …

  23. 7.1CVE-2024-56650EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN: BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 Read…

  24. 7.1CVE-2024-56627EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read An offset from client could be a negative value, It could lead to an out-of-bounds read from the stream_buf. Note …

  25. 7.1CVE-2024-56597EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix shift-out-of-bounds in dbSplit When dmt_budmin is less than zero, it causes errors in the later stages. Added a check to return an error beforehand in dbAllocCt…

  26. 7.1CVE-2024-56555EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binder_add_freeze_work() In binder_add_freeze_work() we iterate over the proc->nodes with the proc->inner_lock held. However, this lock is temporarily…

  27. 7.2CVE-2020-9211EPSS 0.2%

    There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnerability by modifying some configuration to cause out-of-bound read and write, cau…

  28. 5.3CVE-2020-1819EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  29. 5.3CVE-2020-1818EPSS 0.3%

    There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an inco…

  30. 7.1CVE-2024-53162EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.

  31. 7.1CVE-2024-53150KEVEPSS 1.4%

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock de…

  32. 7.1CVE-2024-53147EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(…

  33. 4.3CVE-2024-56378EPSS 0.6%

    libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

  34. 5.3CVE-2024-51471EPSS 0.3%

    IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.

  35. 5.6CVE-2024-11616EPSS 0.3%

    Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vulnerability arises from the fact that the NumberOfBytes argument to ExAllocatePo…

  36. 5.5CVE-2022-44517EPSS 0.3%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of a…

  37. 5.5CVE-2022-44516EPSS 0.3%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of a…

  38. 5.5CVE-2022-44515EPSS 0.3%

    Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of a…

  39. 8.8CVE-2024-12693EPSS 0.4%

    Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  40. 10.0CVE-2024-47039EPSS 0.2%

    In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  information disclosure with no additional execution privileges needed. User  interaction is not n…

  41. 7.4CVE-2024-11614EPSS 0.6%

    An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds rea…

  42. 8.1CVE-2024-56083EPSS 0.5%

    Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.com URL (aka the VSCode live share URL) for a specific "Use Devin's Machine" session. For e…

  43. 8.5CVE-2024-9508EPSS 0.2%

    Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code.

  44. 8.5CVE-2024-12212EPSS 0.2%

    The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures, resulting in execution of arbitrary c…

  45. 7.5CVE-2024-54116EPSS 0.2%

    Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

  46. 7.5CVE-2024-54115EPSS 0.2%

    Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.

  47. 7.5CVE-2024-54114EPSS 0.2%

    Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.

  48. 7.5CVE-2024-54109EPSS 0.3%

    Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

  49. 7.5CVE-2024-54108EPSS 0.2%

    Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

  50. 7.5CVE-2024-54107EPSS 0.2%

    Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.