cve.bz

CWE-125: Out-of-bounds Read, page 95

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-40085EPSS 0.09%

    In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not n…

  2. 5.5CVE-2024-0030EPSS 0.4%

    In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not …

  3. 5.5CVE-2023-40124EPSS 0.09%

    In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images with no additional execution privileges needed. User interaction is not needed f…

  4. 5.5CVE-2023-40112EPSS 0.08%

    In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privilege…

  5. 7.8CVE-2024-20750EPSS 0.3%

    Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this…

  6. 5.5CVE-2024-20749EPSS 2.3%

    Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  7. 5.5CVE-2024-20748EPSS 2.3%

    Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  8. 5.5CVE-2024-20747EPSS 2.4%

    Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  9. 5.5CVE-2024-20736EPSS 3.2%

    Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  10. 5.5CVE-2024-20735EPSS 2.3%

    Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such …

  11. 7.8CVE-2024-20742EPSS 0.3%

    Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this v…

  12. 5.5CVE-2024-20725EPSS 0.2%

    Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Explo…

  13. 5.5CVE-2024-20724EPSS 0.2%

    Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Explo…

  14. 5.5CVE-2024-20722EPSS 0.2%

    Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Explo…

  15. 4.7CVE-2022-23089EPSS 0.2%

    When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted ps_string, w…

  16. 7.5CVE-2023-50927EPSS 0.5%

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite implementation of the RPL protocol in the Contiki-NG operating system. This vulnerab…

  17. 7.5CVE-2023-50926EPSS 0.5%

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More s…

  18. 6.5CVE-2023-41252EPSS 0.2%

    Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access.

  19. 5.9CVE-2024-21344EPSS 1.7%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  20. 7.5CVE-2024-21343EPSS 1.8%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  21. 7.1CVE-2024-23440EPSS 0.2%

    Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer.

  22. 7.1CVE-2024-23439EPSS 0.2%

    Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver.

  23. 6.1CVE-2024-1140EPSS 0.2%

    Twister Antivirus v8.17 is vulnerable to an Out-of-bounds Read vulnerability by triggering the 0x801120B8 IOCTL code of the filmfd.sys driver.

  24. 7.8CVE-2024-24923EPSS 0.3%

    A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications contain an out of bounds read past the end of an allocated structure while parsing s…

  25. 7.8CVE-2024-23802EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain an out of bounds read past the end of an…

  26. 7.8CVE-2023-49125EPSS 0.2%

    A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.1.252), Parasolid V36.0 (All versions < V36.0.198), Solid Edge SE2023 (All versions < V223.0 Update 11), Solid Edge SE20…

  27. 9.1CVE-2022-48623EPSS 0.8%

    The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service.

  28. 5.0CVE-2024-24826EPSS 0.2%

    Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, `QuickTimeVideo::NikonTagsDecoder…

  29. 7.5CVE-2024-20290EPSS 33%

    A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-stri…

  30. 7.5CVE-2024-25201EPSS 0.7%

    Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.

  31. 7.5CVE-2023-43533EPSS 0.3%

    Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

  32. 7.1CVE-2023-33065EPSS 0.1%

    Information disclosure in Audio while accessing AVCS services from ADSP payload.

  33. 5.5CVE-2023-33064EPSS 0.1%

    Transient DOS in Audio when invoking callback function of ASM driver.

  34. 5.5CVE-2023-33060EPSS 0.1%

    Transient DOS in Core when DDR memory check is called while DDR is not initialized.

  35. 9.1CVE-2023-33058EPSS 0.4%

    Information disclosure in Modem while processing SIB5.

  36. 7.1CVE-2024-20820EPSS 0.2%

    Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read.

  37. 5.5CVE-2024-20814EPSS 0.2%

    Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information.

  38. 7.5CVE-2023-6387EPSS 0.6%

    A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution

  39. 5.5CVE-2023-49118EPSS 0.1%

    in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.

  40. 5.5CVE-2023-43756EPSS 0.1%

    in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.

  41. 7.8CVE-2023-46045EPSS 0.8%

    Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

  42. 5.1CVE-2023-40551EPSS 0.4%

    A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.

  43. 5.5CVE-2023-40550EPSS 0.4%

    An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.

  44. 5.5CVE-2023-40549EPSS 0.4%

    An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a d…

  45. 9.1CVE-2021-42147EPSS 0.8%

    Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.

  46. 9.8CVE-2021-42144EPSS 0.7%

    Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().

  47. 7.8CVE-2024-22705EPSS 0.3%

    An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts d…

  48. 7.5CVE-2023-39197EPSS 1.0%

    An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.

  49. 5.5CVE-2024-22957EPSS 0.3%

    swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190.

  50. 5.5CVE-2023-48347EPSS 0.08%

    In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed