CWE-125

9,161 vulnerabilities with CWE-125

CVE-2026-9121 HIGH

Google Chrome < 148.0.7778.179 - Out-of-bounds Read in GPU via Crafted HTML Page

CVSS 8.8

CVE-2026-9113 MEDIUM

Google Chrome < 148.0.7778.179 - Out-of-bounds Read in GPU via Crafted HTML Page

CVSS 4.3

CVE-2026-5946 HIGH

BIND 9.11.0-9.16.50, 9.18.0-9.18.48, 9.20.0-9.20.22, 9.21.0-9.21.21 - DoS via Non-IN DNS Message Handling

CVSS 7.5

CVE-2026-32792 MEDIUM

Unbound 1.6.2-1.25.0 - Denial of Service via DNSCrypt Packet Processing

CVSS 5.3

CVE-2026-24213 HIGH

NVIDIA Triton Inference Server < 26.03 - Out-of-bounds Read in DALI Backend

CVSS 8.0

CVE-2026-43620 MEDIUM

Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

CVSS 6.5

CVE-2026-43618 HIGH

Rsync < 3.4.3 Integer Overflow Information Disclosure

CVSS 8.1

CVE-2026-32882 HIGH

libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride

CVSS 7.1

CVE-2026-33642 CRITICAL

Kitty <0.47.0 compose_rectangles - Heap Buffer Over-Read/Write

CVSS 9.9

CVE-2026-32738 MEDIUM

libheif <1.22.0 samples_per_chunk - Out-of-Bounds Read Denial of Service

CVSS 6.5

CVE-2026-38719 MEDIUM

OpENer v2.3-558-g1e99582 - Out-of-Bounds Read

CVSS 6.2

CVE-2026-8686 HIGH

DoS from MQTT v5.0 Deserialization Fault in core MQTT

CVSS 7.5

CVE-2026-8578 LOW

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in GPU

CVSS 3.1

CVE-2026-8546 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in GPU

CVSS 5.3

CVE-2026-8543 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in FileSystem

CVSS 5.3

CVE-2026-8541 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in UI

CVSS 5.3

CVE-2026-8535 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in Media via Crafted JPEG File

CVSS 5.3

CVE-2026-43996 MEDIUM

OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder

CVSS 5.5

CVE-2026-43909 HIGH

OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder

CVSS 8.8

CVE-2026-42934 MEDIUM

NGINX Plus and NGINX Open Source - Out-of-bounds Read in ngx_http_charset_module

CVSS 4.8

CVE-2026-42446 MEDIUM

NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser

CVSS 4.4

CVE-2026-40380 MEDIUM

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

CVSS 6.2

CVE-2026-40360 HIGH

Microsoft Excel Information Disclosure Vulnerability

CVSS 7.8

CVE-2026-35423 MEDIUM

Microsoft Windows 10 Version 1607 - Windows 11 Telnet Client Information Disclosure Vulnerability

CVSS 5.4

CVE-2026-35419 MEDIUM

Microsoft Windows 11 Version 24H2 - Windows DWM Core Library Information Disclosure Vulnerability

CVSS 5.5