CWE-125 Out-of-bounds Read
baseThe product reads data past the end, or before the beginning, of the intended buffer.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (11798)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-11645US | —OT critical | KEV | ||
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium… | ||||
| CVE-2026-3055US | critical9.8OT critical | KEV | ||
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread | ||||
| CVE-2025-5777US | high7.5OT critical | KEV | ||
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | ||||
| CVE-2025-5419US | —OT critical | KEV | ||
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur… | ||||
| CVE-2025-24991US | —OT critical | KEV | ||
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | ||||
| CVE-2025-27363US | high8.1OT critical | KEV | ||
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to Tru… | ||||
| CVE-2025-22226US | medium6.0OT critical | KEV | ||
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a vir… | ||||
| CVE-2025-0282US | critical9.0OT critical | KEV | ||
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.… | ||||
| CVE-2024-53197US | —OT critical | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A bogus device can provide a… | ||||
| CVE-2024-53150US | high7.1OT critical | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
The current USB-audio driver code doesn't… | ||||
| CVE-2024-53104US | high7.8OT critical | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
This can lead to out of boun… | ||||
| CVE-2024-0519US | high8.8OT critical | KEV | ||
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur… | ||||
| CVE-2023-42916US | medium6.5OT critical | KEV | ||
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content… | ||||
| CVE-2023-36424US | high7.8OT critical | KEV | ||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||||
| CVE-2023-4863US | high8.8OT critical | KEV | ||
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag… | ||||
| CVE-2023-28204US | medium6.5OT critical | KEV | ||
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iO… | ||||
| CVE-2022-22674US | medium5.5OT critical | KEV | ||
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Se… | ||||
| CVE-2021-4034US | high7.8OT critical | KEV | ||
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri… | ||||
| CVE-2021-25487US | high7.8OT critical | KEV | ||
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dere… | ||||
| CVE-2020-11899US | medium5.4OT critical | KEV | ||
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | ||||
04
attack patterns (1)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan