cve.bz

CWE-125: Out-of-bounds Read, page 96

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-48345EPSS 0.08%

    In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

  2. 5.5CVE-2023-48344EPSS 0.08%

    In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

  3. 5.5CVE-2023-48341EPSS 0.08%

    In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

  4. 8.8CVE-2024-0519KEVEPSS 3.8%

    Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  5. 6.5CVE-2023-45231EPSS 0.8%

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a …

  6. 6.5CVE-2023-45229EPSS 1.0%

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and pot…

  7. 7.5CVE-2023-44112EPSS 0.4%

    Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.

  8. 9.6CVE-2024-21640EPSS 0.6%

    Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the…

  9. 9.6CVE-2024-21639EPSS 0.7%

    CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of…

  10. 7.8CVE-2023-6040EPSS 0.3%

    An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tab…

  11. 6.5CVE-2023-42865EPSS 0.5%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory.

  12. 6.5CVE-2023-42862EPSS 0.5%

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory.

  13. 5.5CVE-2024-20715EPSS 0.3%

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  14. 5.5CVE-2024-20714EPSS 0.3%

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  15. 5.5CVE-2024-20713EPSS 0.3%

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  16. 5.5CVE-2024-20712EPSS 0.3%

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  17. 5.5CVE-2024-20711EPSS 0.3%

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  18. 5.5CVE-2024-20710EPSS 0.3%

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  19. 6.5CVE-2023-47993EPSS 0.6%

    A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.

  20. 6.5CVE-2024-21314EPSS 2.1%

    Microsoft Message Queuing Information Disclosure Vulnerability

  21. 5.5CVE-2024-21311EPSS 0.8%

    Windows Cryptographic Services Information Disclosure Vulnerability

  22. 4.7CVE-2024-20691EPSS 0.6%

    Windows Themes Information Disclosure Vulnerability

  23. 7.5CVE-2024-20687EPSS 2.5%

    Microsoft AllJoyn API Denial of Service Vulnerability

  24. 6.5CVE-2024-20660EPSS 2.0%

    Microsoft Message Queuing Information Disclosure Vulnerability

  25. 7.8CVE-2024-20658EPSS 0.7%

    Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

  26. 7.8CVE-2024-20653EPSS 4.5%

    Microsoft Common Log File System Elevation of Privilege Vulnerability

  27. 7.8CVE-2023-51439EPSS 0.3%

    A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions <…

  28. 7.8CVE-2023-49127EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This coul…

  29. 7.8CVE-2023-49126EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This coul…

  30. 7.8CVE-2023-49124EPSS 0.2%

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This coul…

  31. 5.5CVE-2023-36629EPSS 0.4%

    The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read.

  32. 7.8CVE-2021-3600EPSS 0.3%

    It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.

  33. 9.1CVE-2024-0322EPSS 0.9%

    Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

  34. 7.5CVE-2023-38678EPSS 0.5%

    OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

  35. 7.5CVE-2024-0207EPSS 0.5%

    HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

  36. 7.5CVE-2023-49552EPSS 0.8%

    An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file.

  37. 9.8CVE-2023-4280EPSS 0.4%

    An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

  38. 7.5CVE-2023-43512EPSS 0.3%

    Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

  39. 7.5CVE-2023-33116EPSS 0.3%

    Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

  40. 7.5CVE-2023-26157EPSS 0.5%

    Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

  41. 4.4CVE-2023-32880EPSS 0.09%

    In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  42. 4.4CVE-2023-32878EPSS 0.1%

    In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  43. 4.4CVE-2023-32876EPSS 0.09%

    In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: AL…

  44. 4.4CVE-2023-32875EPSS 0.09%

    In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: AL…

  45. 7.5CVE-2023-52267EPSS 0.7%

    ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.

  46. 5.5CVE-2023-51432EPSS 0.2%

    Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.

  47. 5.5CVE-2023-23441EPSS 0.2%

    Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.

  48. 7.5CVE-2023-52152EPSS 0.6%

    mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain host length recalculation.

  49. 7.5CVE-2023-51713ExploitEPSS 4.2%

    make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

  50. 7.8CVE-2023-6315EPSS 0.3%

    Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file.