cve.bz

CWE-125: Out-of-bounds Read, page 81

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2024-44161EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination.

  2. 5.5CVE-2024-44134EPSS 0.2%

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information.

  3. 5.5CVE-2024-27880EPSS 0.3%

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously…

  4. 5.5CVE-2024-27861EPSS 0.2%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory.

  5. 5.5CVE-2024-27860EPSS 0.2%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory.

  6. 1.8CVE-2023-25546EPSS 0.1%

    Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.

  7. 5.5CVE-2024-45111EPSS 0.3%

    Illustrator versions 28.6, 27.9.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita…

  8. 5.5CVE-2024-41867EPSS 0.3%

    After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  9. 5.5CVE-2024-39382EPSS 0.3%

    After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  10. 5.5CVE-2024-41873EPSS 0.3%

    Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  11. 5.5CVE-2024-41872EPSS 0.3%

    Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  12. 5.5CVE-2024-41871EPSS 0.3%

    Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  13. 5.5CVE-2024-41870EPSS 0.3%

    Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  14. 7.5CVE-2024-44460EPSS 0.5%

    An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).

  15. 5.5CVE-2024-45182EPSS 0.2%

    An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service.

  16. 6.5CVE-2024-42484EPSS 0.4%

    ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrs_num field of the g…

  17. 5.5CVE-2024-41868EPSS 0.2%

    Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitat…

  18. 5.5CVE-2024-40656EPSS 0.08%

    In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges nee…

  19. 9.8CVE-2024-38240EPSS 1.5%

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

  20. 7.1CVE-2024-37966EPSS 2.2%

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

  21. 4.3CVE-2024-37342EPSS 1.7%

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

  22. 8.8CVE-2024-37338EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  23. 4.4CVE-2024-6876EPSS 0.2%

    Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.

  24. 5.5CVE-2024-27368EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_rece…

  25. 5.5CVE-2024-27367EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor Exynos Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_ind(), there is n…

  26. 5.5CVE-2024-27366EPSS 0.2%

    An issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_scan_done_ind(), ther…

  27. 5.5CVE-2024-27364EPSS 0.2%

    An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_roamed_ind(), there is no input vali…

  28. 8.8CVE-2024-43110EPSS 0.4%

    The ctl_request_sense function could expose up to three bytes of the kernel heap to userspace. Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to achieve code execution on the host in the …

  29. 8.4CVE-2024-41928EPSS 0.2%

    Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is c…

  30. 7.5CVE-2024-20505EPSS 0.6%

    A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions co…

  31. 7.1CVE-2024-44993EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` When enabling UBSAN on Raspberry Pi 5, we get the following warning: [ 387.894977] UBSAN: array-index-out-of-bou…

  32. 7.1CVE-2024-34658EPSS 0.2%

    Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.

  33. 7.5CVE-2024-33057EPSS 0.3%

    Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.

  34. 7.5CVE-2024-33051EPSS 0.3%

    Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

  35. 7.5CVE-2024-33050EPSS 0.3%

    Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

  36. 7.5CVE-2024-33048EPSS 0.3%

    Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.

  37. 7.8CVE-2024-33047EPSS 0.1%

    Memory corruption when the captureRead QDCM command is invoked from user-space.

  38. 5.5CVE-2024-33043EPSS 0.09%

    Transient DOS while handling PS event when Program Service name length offset value is set to 255.

  39. 7.5CVE-2024-39775EPSS 0.4%

    in OpenHarmony v4.1.0 and prior versions allow a remote attacker cause information leak through out-of-bounds Read.

  40. 5.5CVE-2024-39612EPSS 0.2%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  41. 5.5CVE-2024-38382EPSS 0.2%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  42. 4.4CVE-2024-20088EPSS 0.10%

    In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08…

  43. 4.4CVE-2024-20085EPSS 0.10%

    In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0894420…

  44. 4.4CVE-2024-20084EPSS 0.10%

    In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0894421…

  45. 3.3CVE-2024-0109EPSS 0.2%

    NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process m…

  46. 10.0CVE-2024-5991EPSS 0.6%

    In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requireme…

  47. 7.8CVE-2024-38210EPSS 0.7%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  48. 5.5CVE-2022-48932EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: sla…

  49. 5.5CVE-2022-48929EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg2btf_ids. When commit e6ac2450d6de ("bpf: Support bpf program calling kernel function") added kfunc support, it define…

  50. 8.8CVE-2024-7966EPSS 0.7%

    Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Hig…