cve.bz

CWE-125: Out-of-bounds Read, page 79

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-42420EPSS 0.8%

    Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages. Crafted HTTP requests may cause affected products crashed.

  2. 8.6CVE-2024-48208ExploitEPSS 1.6%

    pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.

  3. 8.2CVE-2024-31029EPSS 0.6%

    An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause a Denial of Service through specially crafted packets.

  4. 7.1CVE-2024-50042EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid memory operations. This is caused by not reallocating some arrays. Reproducer: modprob…

  5. 7.1CVE-2022-49032EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw KASAN report out-of-bounds read as follows: BUG: KASAN: global-out-of-bounds in afe4404_read_raw+0x2ce/0x…

  6. 7.1CVE-2022-49031EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_raw KASAN report out-of-bounds read as follows: BUG: KASAN: global-out-of-bounds in afe4403_read_raw+0x42e/0x4c0 Read…

  7. 7.1CVE-2022-48999EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match: fib_nh_match…

  8. 7.1CVE-2022-48966EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value comes from the user. It is passed to: if (cpu_online(pp->rxq_def)) inside the m…

  9. 7.1CVE-2024-49928EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements Because the loop-expression will do one more time before getting false from cond-expression, t…

  10. 7.1CVE-2024-47757EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before d…

  11. 7.1CVE-2024-47723EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc() In dbNextAG() , there is no check for the case where bmp->db_numag is greater or same than MAXAG due to a polluted ima…

  12. 7.1CVE-2024-47721EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading The handler of firmware C2H event RTW89_MAC_C2H_FUNC_READ_WOW_CA…

  13. 4.3CVE-2024-9143EPSS 5.8%

    Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an applicatio…

  14. 8.5CVE-2023-32190EPSS 0.2%

    mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

  15. 8.1CVE-2024-41311EPSS 0.8%

    In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.

  16. 8.4CVE-2024-47965EPSS 0.2%

    Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability t…

  17. 7.8CVE-2024-48958EPSS 0.6%

    execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

  18. 7.8CVE-2024-48957EPSS 0.5%

    execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

  19. 8.7CVE-2024-39516EPSS 0.4%

    An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to cra…

  20. 7.8CVE-2024-47421EPSS 0.4%

    Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage th…

  21. 5.5CVE-2024-47420EPSS 0.3%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati…

  22. 5.5CVE-2024-47419EPSS 0.3%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati…

  23. 5.5CVE-2024-45145EPSS 0.2%

    Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as A…

  24. 5.5CVE-2024-20787EPSS 0.2%

    Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Expl…

  25. 7.5CVE-2024-43565EPSS 2.2%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  26. 7.5CVE-2024-43562EPSS 2.2%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  27. 6.5CVE-2024-43561EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  28. 6.5CVE-2024-43558EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  29. 6.5CVE-2024-43557EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  30. 6.5CVE-2024-43555EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  31. 6.5CVE-2024-43542EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  32. 6.5CVE-2024-43540EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  33. 6.5CVE-2024-43538EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  34. 6.5CVE-2024-43537EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  35. 6.5CVE-2024-43534EPSS 1.8%

    Windows Graphics Component Information Disclosure Vulnerability

  36. 5.5CVE-2024-43508EPSS 0.6%

    Windows Graphics Component Information Disclosure Vulnerability

  37. 7.3CVE-2024-45466EPSS 0.2%

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Sim…

  38. 7.3CVE-2024-45465EPSS 0.2%

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Sim…

  39. 7.3CVE-2024-45464EPSS 0.2%

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Sim…

  40. 7.3CVE-2024-45463EPSS 0.3%

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Sim…

  41. 5.5CVE-2024-39806EPSS 0.2%

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  42. 7.5CVE-2024-38397EPSS 0.3%

    Transient DOS while parsing probe response and assoc response frame.

  43. 8.2CVE-2024-33073EPSS 0.3%

    Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

  44. 7.5CVE-2024-33071EPSS 0.3%

    Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.

  45. 7.5CVE-2024-33070EPSS 0.3%

    Transient DOS while parsing ESP IE from beacon/probe response frame.

  46. 8.2CVE-2024-33064EPSS 0.4%

    Information disclosure while parsing the multiple MBSSID IEs from the beacon.

  47. 7.5CVE-2024-33049EPSS 0.3%

    Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.

  48. 4.9CVE-2024-20102EPSS 0.3%

    In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

  49. 4.4CVE-2024-20097EPSS 0.10%

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313…

  50. 4.4CVE-2024-20096EPSS 0.10%

    In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900;…