CWE-125

Out-of-bounds Read

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product reads data past the end, or before the beginning, of the intended buffer.

9,161 vulnerabilities with CWE-125
CVE-2026-52917 HIGH
sctp: diag: reject stale associations in dump_one path
CVSS 7.1
CVE-2026-9539 MEDIUM
libslirp TCP URG OOB Read Information Leak
CVSS 6.5
CVE-2026-12892 MEDIUM
GStreamer gst-plugins-bad H.264 Parser - Out-of-Bounds Read
CVSS 4.4
CVE-2026-12891 MEDIUM
GStreamer gst-plugins-bad H.266 Parser - Out-of-Bounds Read
CVSS 4.3
CVE-2026-12969 MEDIUM
Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation
CVSS 5.3
CVE-2026-55654 LOW
Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination
CVSS 3.7
CVE-2026-10658 HIGH
Zephyr Bluetooth Host ISO RX - Denial of Service
CVSS 7.1
CVE-2026-10645 MEDIUM
Zephyr ext2 Directory Parser - Out-of-Bounds Read and Denial of Service
CVSS 4.9
CVE-2026-48502 HIGH
MessagePack-CSharp ReadDateTime - Stack Overflow Denial of Service
CVSS 7.5
CVE-2026-56378 LOW
ImageMagick - Heap Out-of-Bounds Read in PCD Decoder
CVSS 3.7
CVE-2026-56367 LOW
ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding
CVSS 3.7
CVE-2026-9265 CRITICAL
Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path
CVSS 9.1
CVE-2026-49271 MEDIUM
libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder
CVSS 6.5
CVE-2026-56210 HIGH
Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
CVSS 7.1
CVE-2026-52910 HIGH
bpf: Free reuseport cBPF prog after RCU grace period.
CVSS 7.8
CVE-2026-48138 HIGH
NI grpc-device <= 2.17.0 Streaming API - Denial of Service
CVSS 7.5
CVE-2026-45696 MEDIUM
OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)
CVSS 6.5
CVE-2026-56099 MEDIUM
OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input
CVSS 5.3
CVE-2026-50643 MEDIUM
Out‑of‑Bounds Read in 8cc
CVE-2026-3894 CRITICAL
RTI Connext Professional Core Libraries - Out-of-Bounds Read
CVSS 9.1
CVE-2026-30802 HIGH
RTI Connext Micro Core Libraries - Out-of-Bounds Read
CVSS 8.2
CVE-2026-48142 MEDIUM
F5 NGINX Open Source - NGINX ngx_http_charset_module Vulnerability
CVSS 4.8
CVE-2026-12461 MEDIUM
Google Chrome - Out-of-bounds Read
CVSS 6.5
CVE-2026-12444 MEDIUM
Google Chrome - Out-of-bounds Read
CVSS 5.5
CVE-2026-0165 MEDIUM
Google Android - Information Disclosure
CVSS 5.7
Details
Vulnerabilities 9,161
Links
MITRE CWE Entry Search this CWE With Exploits