cve.bz

CWE-125: Out-of-bounds Read, page 84

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2024-21143EPSS 0.4%

    Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network acc…

  2. 9.6CVE-2024-6779EPSS 6.3%

    Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  3. 7.1CVE-2022-48866EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing valida…

  4. 5.5CVE-2022-48839EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() syzbot found that when an AF_PACKET socket is using PACKET_COPY_THRESH and mmap operations, tpacket_rcv() i…

  5. 7.1CVE-2022-48827EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb9015280d ("NFS: Always provide aligned buffers to > the RPC read layers") on the cl…

  6. 7.8CVE-2022-48805EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup ax88179_rx_fixup() contains several out-of-bounds accesses that can be triggered by a malicious (or defect…

  7. 5.5CVE-2022-48803EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _get_table_maxdiv() tries to access "clk_div_table" array out of bound defined in phy-j721e-wiz.c. Add a sentinel entry t…

  8. 6.4CVE-2023-52886EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() Syzbot reported an out-of-bounds read in sysfs.c:read_descriptors(): BUG: KASAN: slab-out-of-…

  9. 4.3CVE-2024-40630EPSS 0.4%

    OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. …

  10. 7.1CVE-2024-40978EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into …

  11. 7.1CVE-2024-40929EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the …

  12. 9.1CVE-2024-21524EPSS 0.9%

    All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's po…

  13. 8.4CVE-2024-39882EPSS 0.7%

    Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnera…

  14. 5.5CVE-2024-34140EPSS 0.3%

    Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Explo…

  15. 8.4CVE-2023-50806EPSS 0.2%

    A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 13…

  16. 6.5CVE-2024-38102EPSS 0.8%

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

  17. 6.5CVE-2024-38101EPSS 0.8%

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

  18. 7.5CVE-2024-38073EPSS 2.5%

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

  19. 7.8CVE-2024-38062EPSS 1.6%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  20. 7.8CVE-2024-38057EPSS 0.8%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  21. 5.5CVE-2024-38056EPSS 0.8%

    Microsoft Windows Codecs Library Information Disclosure Vulnerability

  22. 6.5CVE-2024-38048EPSS 1.0%

    Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

  23. 7.2CVE-2024-38028EPSS 2.1%

    Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

  24. 8.2CVE-2024-6606EPSS 0.4%

    Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunderbird < 128.

  25. 7.3CVE-2024-33654EPSS 0.2%

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted BMP files. This could allow an at…

  26. 7.3CVE-2024-33653EPSS 0.2%

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted BMP files. This could allow an at…

  27. 7.1CVE-2024-39487EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function bond_option_arp_ip_targets_set(), if newval->string is an empty string, newval->string+1 …

  28. 6.5CVE-2024-39695EPSS 0.6%

    Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video forma…

  29. 6.8CVE-2024-6505EPSS 0.7%

    A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds…

  30. 8.2CVE-2023-52169EPSS 1.0%

    The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename lis…

  31. 7.8CVE-2024-34122EPSS 0.3%

    Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage thi…

  32. 9.8CVE-2024-36243EPSS 0.6%

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.

  33. 7.8CVE-2024-21465EPSS 0.1%

    Memory corruption while processing key blob passed by the user.

  34. 5.5CVE-2024-21462EPSS 0.09%

    Transient DOS while loading the TA ELF file.

  35. 7.5CVE-2024-21458EPSS 0.2%

    Information disclosure while handling SA query action frame.

  36. 7.5CVE-2024-21457EPSS 0.2%

    INformation disclosure while handling Multi-link IE in beacon frame.

  37. 9.1CVE-2024-21456EPSS 0.3%

    Information Disclosure while parsing beacon frame in STA.

  38. 9.1CVE-2024-37371EPSS 1.9%

    In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

  39. 8.4CVE-2016-20022EPSS 0.2%

    In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the suppli…

  40. 6.5CVE-2024-3017EPSS 0.3%

    In a Silicon Labs  multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenThread Border Router(OTBR) application task running on the host platform to crash, allowing an atta…

  41. 6.3CVE-2024-28820EPSS 0.4%

    Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attackers with a valid LDAP username and who can control the challenge/response passwor…

  42. 9.1CVE-2024-5535EPSS 5.6%

    Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of poten…

  43. 7.1CVE-2024-39471EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should be stop to avoid out-of-bounds read, so directly re…

  44. 7.1CVE-2024-39467EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() syzbot reports a kernel bug as below: F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 ==…

  45. 6.8CVE-2024-37086EPSS 0.2%

    VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition o…

  46. 7.8CVE-2024-37005EPSS 0.4%

    A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in…

  47. 7.8CVE-2024-36999EPSS 0.4%

    A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary co…

  48. 7.8CVE-2024-23153EPSS 0.4%

    A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code …

  49. 7.8CVE-2024-23152EPSS 0.4%

    A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code…

  50. 7.8CVE-2024-23149EPSS 0.4%

    A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary co…