cve.bz

CWE-125: Out-of-bounds Read, page 73

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-54508EPSS 1.0%

    The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may l…

  2. 9.8CVE-2024-54506EPSS 0.7%

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.

  3. 6.5CVE-2024-54502EPSS 17%

    The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an…

  4. 5.3CVE-2024-44246EPSS 1.1%

    The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. On a device with Private Relay enabled, adding a website to the S…

  5. 7.5CVE-2024-49113EPSS 84%

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

  6. 6.6CVE-2024-49111EPSS 0.8%

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

  7. 6.8CVE-2024-49110EPSS 0.9%

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

  8. 6.6CVE-2024-49109EPSS 0.9%

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

  9. 4.3CVE-2024-49103EPSS 1.0%

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

  10. 6.6CVE-2024-49101EPSS 0.9%

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

  11. 4.3CVE-2024-49099EPSS 1.0%

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

  12. 4.3CVE-2024-49098EPSS 1.0%

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

  13. 6.8CVE-2024-49092EPSS 0.8%

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

  14. 6.8CVE-2024-49083EPSS 0.8%

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

  15. 6.8CVE-2024-49078EPSS 0.9%

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

  16. 6.8CVE-2024-49077EPSS 0.9%

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

  17. 5.5CVE-2024-49065EPSS 1.1%

    Microsoft Office Remote Code Execution Vulnerability

  18. 5.1CVE-2024-47778EPSS 0.8%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the siz…

  19. 5.1CVE-2024-47777EPSS 1.2%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data +…

  20. 5.1CVE-2024-47776EPSS 1.2%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer…

  21. 5.1CVE-2024-47775EPSS 1.2%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains suff…

  22. 5.1CVE-2024-47774EPSS 0.8%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value …

  23. 6.8CVE-2024-47602EPSS 0.9%

    GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not pr…

  24. 5.1CVE-2024-47600EPSS 1.1%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is …

  25. 5.1CVE-2024-47598EPSS 0.9%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t p…

  26. 5.1CVE-2024-47597EPSS 1.2%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond …

  27. 5.1CVE-2024-47596EPSS 1.1%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file with…

  28. 5.1CVE-2024-47543EPSS 0.9%

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length…

  29. 6.8CVE-2024-47542EPSS 1.1%

    GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null work->hdr…

  30. 7.5CVE-2024-37401EPSS 1.5%

    An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service.

  31. 5.5CVE-2024-53005EPSS 0.4%

    Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl…

  32. 5.5CVE-2024-53004EPSS 0.5%

    Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl…

  33. 5.5CVE-2024-53951EPSS 0.3%

    InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  34. 5.5CVE-2024-49549EPSS 0.3%

    InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  35. 5.5CVE-2024-49548EPSS 0.3%

    InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  36. 5.5CVE-2024-49547EPSS 0.3%

    InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  37. 5.5CVE-2024-49546EPSS 0.3%

    InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  38. 5.5CVE-2024-49541EPSS 0.3%

    Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  39. 5.5CVE-2024-49534EPSS 0.5%

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this…

  40. 5.5CVE-2024-49533EPSS 0.5%

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this…

  41. 5.5CVE-2024-49532EPSS 0.5%

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this…

  42. 8.4CVE-2024-10496EPSS 0.2%

    An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a spec…

  43. 8.4CVE-2024-10495EPSS 0.2%

    An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user…

  44. 8.4CVE-2024-10494EPSS 0.2%

    An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially cra…

  45. 7.3CVE-2024-53242EPSS 0.2%

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Sim…

  46. 7.5CVE-2024-54938EPSS 0.6%

    A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads.

  47. 5.5CVE-2024-11268EPSS 0.2%

    A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak.

  48. 7.5CVE-2024-53450EPSS 0.5%

    RAGFlow 0.13.0 suffers from improper access control in document-hooks.ts, allowing unauthorized access to user documents.

  49. 5.3CVE-2024-54937EPSS 0.5%

    A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/assets.

  50. 6.7CVE-2018-9390EPSS 0.09%

    In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User inte…