CVE-2018-12503
9.8CRITICAL
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.
6/16/2018CWE-125
Weakness Type
CWE-125
Out-of-bounds Read
All CVE vulnerabilities classified under this weakness type.
View on MITRE CWETotal CVEs
46
Critical
7
In KEV
0
With Exploits
0
CVE-2014-125017
7.3HIGH
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated rem
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated rem...
6/18/2022CWE-119, CWE-125
CVE-2017-9283
9.8CRITICAL
An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
9/21/2017CWE-125, CWE-125
CVE-2020-13601
9.0CRITICAL
Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advis
Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advis...
5/25/2021CWE-125, CWE-125
CVE-2024-5159
8.8HIGH
Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
5/22/2024CWE-125, CWE-125
CVE-2024-3855
6.5MEDIUM
In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.
In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.
4/16/2024CWE-125
CVE-2021-3881
9.8CRITICAL
libmobi is vulnerable to Out-of-bounds Read
libmobi is vulnerable to Out-of-bounds Read
10/15/2021CWE-125, CWE-125
CVE-2025-0591
7.8HIGH
Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.
Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.
2/17/2025CWE-125
CVE-2025-21179
4.8MEDIUM
DHCP Client Service Denial of Service Vulnerability
DHCP Client Service Denial of Service Vulnerability
2/11/2025CWE-125, CWE-125
CVE-2022-0173
5.5MEDIUM
radare2 is vulnerable to Out-of-bounds Read
radare2 is vulnerable to Out-of-bounds Read
1/11/2022CWE-125, CWE-125
CVE-2021-22756
7.8HIGH
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-suppl
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-suppl...
6/11/2021CWE-125, CWE-125
CVE-2022-0525
9.1CRITICAL
Out-of-bounds Read in Homebrew mruby prior to 3.2.
Out-of-bounds Read in Homebrew mruby prior to 3.2.
2/9/2022CWE-125, CWE-125
CVE-2022-46741
7.1HIGH
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
12/7/2022CWE-125, CWE-125
CVE-2022-44081
5.5MEDIUM
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail.
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail.
10/31/2022CWE-125, CWE-125
CVE-2022-0717
9.1CRITICAL
Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
2/23/2022CWE-125, CWE-125
CVE-2023-5520
7.7HIGH
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
10/11/2023CWE-125, CWE-125
CVE-2022-1899
9.1CRITICAL
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
5/26/2022CWE-125, CWE-125
CVE-2022-1452
7.1HIGH
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. T
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. T...
4/24/2022CWE-125, CWE-125
CVE-2023-5377
7.1HIGH
Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.
Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.
10/4/2023CWE-125, CWE-125
CVE-2022-2183
7.8HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
6/23/2022CWE-125, CWE-125
CVE-2022-0393
7.1HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
1/28/2022CWE-125, CWE-125
CVE-2024-7255
8.8HIGH
Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security seve
Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security seve...
8/1/2024CWE-125, CWE-125 +1
CVE-2022-42773
5.5MEDIUM
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
12/6/2022CWE-125, CWE-125 +1
CVE-2022-42769
3.3LOW
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
12/6/2022CWE-125, CWE-125 +1
CVE-2022-24315
7.5HIGH
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA Syste
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA Syste...
2/9/2022CWE-125
CVE-2021-22809
5.5MEDIUM
A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by S
A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by S...
1/28/2022CWE-125
CVE-2020-20902
6.5MEDIUM
A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that c
A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that c...
9/20/2021CWE-125
CVE-2020-7557
7.8HIGH
A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is importe
A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is importe...
11/19/2020CWE-125
CVE-2025-1674
8.2HIGH
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
2/25/2025CWE-125, CWE-125
CVE-2023-29934
5.5MEDIUM
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
5/5/2023CWE-125, CWE-125
CVE-2023-29933
5.5MEDIUM
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
5/5/2023CWE-125, CWE-125
CVE-2022-0368
7.8HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
1/26/2022CWE-125, CWE-125
CVE-2022-0319
5.5MEDIUM
Out-of-bounds Read in vim/vim prior to 8.2.
Out-of-bounds Read in vim/vim prior to 8.2.
1/21/2022CWE-125, CWE-125
CVE-2024-3854
8.8HIGH
In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115
In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115...
4/16/2024CWE-125
CVE-2022-35087
5.5MEDIUM
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.
9/21/2022CWE-125, CWE-476 +4
CVE-2022-24314
7.5HIGH
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Prod
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Prod...
2/9/2022CWE-125
CVE-2024-50612
5.5MEDIUM
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
10/27/2024CWE-125, CWE-125
CVE-2022-38934
3.3LOW
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.
9/28/2022CWE-125, CWE-125
CVE-2020-11910
5.3MEDIUM
The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
6/17/2020CWE-125, CWE-125
CVE-2020-6555
7.6HIGH
Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
9/21/2020CWE-125
CVE-2025-23418
3.3LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
3/4/2025CWE-125, CWE-125
CVE-2024-25201
7.5HIGH
Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.
Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.
2/7/2024CWE-125, CWE-125
CVE-2024-0207
7.8HIGH
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
1/3/2024CWE-125, CWE-125
CVE-2022-43282
7.1HIGH
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.
10/28/2022CWE-125, CWE-125
CVE-2022-43280
7.1HIGH
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.
10/28/2022CWE-125, CWE-125
CVE-2022-2126
7.8HIGH
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
6/19/2022CWE-125, CWE-125