cve.bz

CWE-125: Out-of-bounds Read, page 99

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.0CVE-2023-25756EPSS 0.4%

    Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

  2. 4.9CVE-2021-26345EPSS 0.4%

    Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.

  3. 5.5CVE-2023-36428EPSS 0.8%

    Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

  4. 7.8CVE-2023-36424KEVEPSS 12%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  5. 6.7CVE-2023-45079EPSS 0.2%

    A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

  6. 6.7CVE-2023-45078EPSS 0.2%

    A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

  7. 6.7CVE-2023-45077EPSS 0.2%

    A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

  8. 6.7CVE-2023-45076EPSS 0.2%

    A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

  9. 6.7CVE-2023-45075EPSS 0.2%

    A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

  10. 4.4CVE-2023-43574EPSS 0.2%

    A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  11. 4.4CVE-2023-43572EPSS 0.2%

    A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  12. 7.5CVE-2023-46767EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  13. 7.5CVE-2023-46766EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  14. 7.5CVE-2023-46762EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  15. 7.5CVE-2023-5998EPSS 0.6%

    Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.

  16. 7.8CVE-2023-5179EPSS 0.3%

    An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially ena…

  17. 9.1CVE-2023-47456EPSS 0.8%

    Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.

  18. 7.8CVE-2023-42538EPSS 0.2%

    An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  19. 7.8CVE-2023-42537EPSS 0.2%

    An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  20. 7.8CVE-2023-42536EPSS 0.2%

    An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  21. 7.5CVE-2023-33061EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

  22. 7.5CVE-2023-33048EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing t2lm buffers.

  23. 7.5CVE-2023-33047EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing no-inherit IES.

  24. 3.8CVE-2023-4535EPSS 0.5%

    An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB …

  25. 5.5CVE-2023-32825EPSS 0.08%

    In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio…

  26. 8.1CVE-2023-1194EPSS 1.1%

    An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due…

  27. 7.5CVE-2023-46724EPSS 2.8%

    Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Ce…

  28. 5.5CVE-2023-40101EPSS 0.1%

    In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl…

  29. 4.4CVE-2023-21379EPSS 0.09%

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploit…

  30. 7.8CVE-2023-21372EPSS 0.10%

    In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  31. 5.5CVE-2023-21368EPSS 0.09%

    In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  32. 4.4CVE-2023-21359EPSS 0.09%

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploit…

  33. 4.4CVE-2023-21357EPSS 0.09%

    In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

  34. 7.5CVE-2023-21353EPSS 0.4%

    In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  35. 5.5CVE-2023-21352EPSS 0.09%

    In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  36. 7.5CVE-2023-21347EPSS 0.4%

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  37. 6.5CVE-2023-21315EPSS 0.2%

    In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exp…

  38. 4.4CVE-2023-21314EPSS 0.09%

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

  39. 5.5CVE-2023-21309EPSS 0.09%

    In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  40. 5.5CVE-2023-21308EPSS 0.09%

    In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  41. 5.5CVE-2023-45897EPSS 0.4%

    exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.

  42. 9.8CVE-2023-46570EPSS 1.1%

    An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.

  43. 9.8CVE-2023-46569EPSS 1.1%

    An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.

  44. 5.5CVE-2023-46407EPSS 0.3%

    FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function.

  45. 7.8CVE-2023-27854EPSS 0.3%

    An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow.  The t…

  46. 7.8CVE-2023-39936EPSS 0.4%

    In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary…

  47. 4.6CVE-2023-4693EPSS 0.5%

    An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows…

  48. 8.8CVE-2023-46603EPSS 0.6%

    In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a.

  49. 5.5CVE-2023-46331EPSS 0.2%

    WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

  50. 7.5CVE-2023-31122EPSS 3.0%

    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.