cve.bz

CWE-125: Out-of-bounds Read, page 83

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2024-34630EPSS 0.2%

    Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  2. 5.5CVE-2024-34629EPSS 0.2%

    Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  3. 5.5CVE-2024-34628EPSS 0.2%

    Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  4. 5.5CVE-2024-34627EPSS 0.2%

    Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  5. 5.5CVE-2024-34626EPSS 0.2%

    Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  6. 5.5CVE-2024-34625EPSS 0.2%

    Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  7. 5.5CVE-2024-34624EPSS 0.2%

    Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  8. 5.5CVE-2024-34621EPSS 0.2%

    Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

  9. 8.8CVE-2024-7522EPSS 0.6%

    Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

  10. 5.5CVE-2024-7537EPSS 0.3%

    oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this …

  11. 7.5CVE-2024-33026EPSS 0.3%

    Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.

  12. 7.5CVE-2024-33025EPSS 0.3%

    Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

  13. 7.5CVE-2024-33020EPSS 0.3%

    Transient DOS while processing TID-to-link mapping IE elements.

  14. 7.5CVE-2024-33019EPSS 0.3%

    Transient DOS while parsing the received TID-to-link mapping action frame.

  15. 7.5CVE-2024-33018EPSS 0.3%

    Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.

  16. 7.5CVE-2024-33015EPSS 0.3%

    Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.

  17. 7.5CVE-2024-33014EPSS 0.3%

    Transient DOS while parsing ESP IE from beacon/probe response frame.

  18. 7.5CVE-2024-33013EPSS 0.3%

    Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.

  19. 7.5CVE-2024-33012EPSS 0.3%

    Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

  20. 7.5CVE-2024-33011EPSS 0.3%

    Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

  21. 7.5CVE-2024-23353EPSS 0.3%

    Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

  22. 7.5CVE-2024-21479EPSS 0.3%

    Transient DOS during music playback of ALAC content.

  23. 7.5CVE-2024-21467EPSS 0.3%

    Information disclosure while handling beacon probe frame during scan entry generation in client side.

  24. 7.5CVE-2024-21459EPSS 0.3%

    Information disclosure while handling beacon or probe response frame in STA.

  25. 5.5CVE-2024-39396EPSS 0.2%

    InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.…

  26. 8.8CVE-2024-7255EPSS 0.7%

    Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  27. 4.4CVE-2024-38481EPSS 0.2%

    Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.

  28. 5.5CVE-2024-39379EPSS 0.3%

    Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…

  29. 6.5CVE-2024-7264EPSS 20%

    libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `s…

  30. 7.1CVE-2023-28074EPSS 0.1%

    Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated attacker with local access could potentially…

  31. 7.8CVE-2024-42118EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is no…

  32. 6.3CVE-2024-42111EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfs_qgroup_inherit structure [BUG] Syzbot reports the following regression detected by KASAN: BUG: KASAN: slab-out-of-bounds i…

  33. 5.5CVE-2024-40816EPSS 0.2%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be able to cause unexpected system shutdown.

  34. 5.5CVE-2024-40806EPSS 0.3%

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.…

  35. 7.1CVE-2024-40799EPSS 0.4%

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.…

  36. 6.5CVE-2024-40789EPSS 1.1%

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing mal…

  37. 5.5CVE-2024-40780EPSS 0.7%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously…

  38. 5.5CVE-2024-40779EPSS 0.3%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously…

  39. 5.5CVE-2024-40777EPSS 7.7%

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpec…

  40. 5.5CVE-2023-42943EPSS 0.2%

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitive location information.

  41. 7.1CVE-2024-41091EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a co…

  42. 7.1CVE-2024-41090EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause…

  43. 5.5CVE-2024-41019EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. There is a check on rt->first_free at first, but walking through by ff without any check. If the seco…

  44. 7.1CVE-2024-41014EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: xfs: add bounds checking to xlog_recover_process_data There is a lack of verification of the space occupied by fixed members of xlog_op_header in the xlog_recover_proces…

  45. 7.1CVE-2024-41013EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a directory data block This adds sanity checks for xfs_dir2_data_unused and xfs_dir2_data_entry to make sure don't stray beyond valid memo…

  46. 4.3CVE-2024-6874EPSS 0.8%

    libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buf…

  47. 6.0CVE-2023-32471EPSS 0.2%

    Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use t…

  48. 7.8CVE-2024-4079EPSS 0.3%

    An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability…

  49. 6.5CVE-2024-2884EPSS 0.2%

    Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

  50. 2.5CVE-2024-21164EPSS 0.5%

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the i…