cve.bz

CWE-125: Out-of-bounds Read, page 91

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2024-3855EPSS 0.4%

    In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.

  2. 8.8CVE-2024-3854EPSS 0.7%

    In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

  3. 8.0CVE-2024-32631EPSS 0.3%

    Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

  4. 7.8CVE-2024-29219EPSS 0.3%

    Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a …

  5. 5.3CVE-2024-28894EPSS 0.5%

    Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending…

  6. 7.5CVE-2024-23911EPSS 0.6%

    Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sen…

  7. 8.2CVE-2024-30401EPSS 0.6%

    An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on MX Series with MPC10E, MPC11, MX10K-LC9600 line cards, MX304, and EX9200-15C, may allow an attacker to exploit a stack…

  8. 7.1CVE-2024-21618EPSS 0.3%

    An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause Denial of Service (DoS).…

  9. 7.8CVE-2024-20797EPSS 0.4%

    Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulner…

  10. 5.5CVE-2024-20796EPSS 0.3%

    Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati…

  11. 5.5CVE-2024-20798EPSS 0.2%

    Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita…

  12. 5.5CVE-2024-20771EPSS 0.3%

    Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio…

  13. 8.4CVE-2023-52070EPSS 0.2%

    JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine t…

  14. 7.1CVE-2021-47219EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() The following issue was observed running syzkaller: BUG: KASAN: slab-out-of-bounds in memcpy include/lin…

  15. 5.5CVE-2021-47210EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read Calling tps6598x_block_read with a higher than allowed len can be handled by just returning an error. There's no …

  16. 7.1CVE-2021-47191EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() The following warning was observed running syzkaller: [ 3813.830724] sg_write: data in/out 65466/242 bytes f…

  17. 5.5CVE-2024-20770EPSS 0.3%

    Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. …

  18. 5.5CVE-2024-20766EPSS 0.3%

    InDesign Desktop versions 18.5.1, 19.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exp…

  19. 5.5CVE-2024-20737EPSS 0.4%

    After Effects versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

  20. 8.8CVE-2024-28938EPSS 2.3%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  21. 5.5CVE-2024-28902EPSS 0.8%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  22. 5.5CVE-2024-28901EPSS 0.7%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  23. 5.5CVE-2024-28900EPSS 0.7%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  24. 5.5CVE-2024-26255EPSS 0.8%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  25. 7.8CVE-2024-26245EPSS 0.7%

    Windows SMB Elevation of Privilege Vulnerability

  26. 6.5CVE-2024-26226EPSS 1.8%

    Windows Distributed File System (DFS) Information Disclosure Vulnerability

  27. 3.3CVE-2024-26217EPSS 0.7%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  28. 5.5CVE-2024-26207EPSS 0.8%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  29. 7.8CVE-2024-26175EPSS 0.6%

    Secure Boot Security Feature Bypass Vulnerability

  30. 5.5CVE-2024-26172EPSS 0.7%

    Windows DWM Core Library Information Disclosure Vulnerability

  31. 7.3CVE-2024-26275EPSS 0.2%

    A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (A…

  32. 9.1CVE-2024-22949EPSS 0.7%

    JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the…

  33. 9.8CVE-2024-23086EPSS 0.7%

    Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the…

  34. 4.4CVE-2023-52536EPSS 0.08%

    In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  35. 8.8CVE-2024-3159EPSS 1.6%

    Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  36. 8.8CVE-2024-3156EPSS 13%

    Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  37. 6.7CVE-2023-25494EPSS 0.2%

    A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables.

  38. 6.7CVE-2024-29783EPSS 0.08%

    In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  39. 5.5CVE-2024-29782EPSS 0.08%

    In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for…

  40. 4.4CVE-2024-29755EPSS 0.09%

    In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio…

  41. 6.2CVE-2024-29754EPSS 0.09%

    In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  42. 5.5CVE-2024-29750EPSS 0.08%

    In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploita…

  43. 5.9CVE-2024-29747EPSS 0.09%

    In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  44. 5.5CVE-2024-29744EPSS 0.09%

    In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitat…

  45. 5.5CVE-2024-29742EPSS 0.08%

    In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for…

  46. 5.5CVE-2024-29739EPSS 0.08%

    In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploita…

  47. 5.5CVE-2024-29738EPSS 0.08%

    In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  48. 5.9CVE-2024-27231EPSS 0.09%

    In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploita…

  49. 7.7CVE-2024-22004EPSS 0.2%

    Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application

  50. 3.3CVE-2024-0076EPSS 0.2%

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a par…