CWE-125

Out-of-bounds Read

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product reads data past the end, or before the beginning, of the intended buffer.

8,912 vulnerabilities with CWE-125
CVE-2020-15888 HIGH
Lua <= 5.4.0 - Heap-Based Buffer Over-Read via Stack Resize and Garbage Collection Interaction
CVSS 8.8
CVE-2020-9649 MEDIUM
Adobe Media Encoder < 14.2 - Out-of-bounds Read
CVSS 5.5
CVE-2020-15603 HIGH
Trend Micro Security 2020 < 16.0.1302 - Out-of-bounds Read via Driver System Call
CVSS 7.5
CVE-2020-14700 MEDIUM
Oracle VM VirtualBox <5.2.44-6.1.12 - Privilege Escalation
CVSS 5.3
CVE-2020-14698 MEDIUM
Oracle VM VirtualBox <5.2.44-6.1.12 - Privilege Escalation
CVSS 5.3
CVE-2020-14695 MEDIUM
Oracle VM VirtualBox <5.2.44-6.1.12 - Privilege Escalation
CVSS 5.3
CVE-2020-14694 MEDIUM
Oracle VM VirtualBox <5.2.44-6.1.12 - Privilege Escalation
CVSS 5.3
CVE-2020-14676 HIGH
Oracle VM VirtualBox < 5.2.44, < 6.0.24, < 6.1.12 - Out-of-bounds Read
CVSS 7.5
CVE-2020-15572 HIGH
Tor < 0.3.5.11 - Denial of Service via Out-of-Bounds Memory Access
CVSS 7.5
CVE-2020-1342 MEDIUM
Microsoft 365 Apps and Office - Information Disclosure via Out-of-bounds Read
CVSS 5.5
CVE-2020-10037 HIGH
SICAM MMU < 2.05, SICAM SGU, SICAM T < 2.18 - Out-of-bounds Read via Web Server Flooding Attack
CVSS 7.5
CVE-2020-13131 MEDIUM
Yubico libykpiv <2.1.0 - Memory Corruption
CVSS 4.3
CVE-2020-10756 MEDIUM
libslirp < 4.3.1 - Out-of-bounds Read in ICMPv6 Echo Reply Handler
CVSS 6.5
CVE-2020-12425 MEDIUM
Firefox < 78.0 - Out-of-bounds Read via Date.parse() Hyphen Processing
CVSS 6.5
CVE-2020-12418 MEDIUM
Firefox ESR < 68.10 - Memory Corruption
CVSS 6.5
CVE-2020-12407 MEDIUM
Firefox < 77.0 - Out-of-bounds Read in WebRender
CVSS 6.5
CVE-2020-12498 HIGH
Phoenix Contact PC Worx <1.87 - RCE
CVSS 7.8
CVE-2020-15476 HIGH
ntop nDPI < 3.2 - Heap-Based Buffer Over-Read in Oracle Protocol Dissector
CVSS 7.5
CVE-2020-15473 CRITICAL
ndpi < 3.2 - Heap-Based Buffer Over-Read in OpenVPN Dissector
CVSS 9.1
CVE-2020-15472 CRITICAL
ntop nDPI < 3.2 - Out-of-bounds Read in H.323 Dissector
CVSS 9.1
CVE-2020-15471 CRITICAL
ndpi < 3.2 - Heap-Based Buffer Over-Read in Packet Parsing
CVSS 9.1
CVE-2020-5971 HIGH
NVIDIA Virtual GPU Manager <8.4-10.3 - Memory Corruption
CVSS 7.8
CVE-2020-7816 HIGH
DaView Indy, DaVa+, DaOffice < 8.995 - Out-of-bounds Read in JPEG Image Parser
CVSS 7.0
CVE-2020-15395 HIGH
MediaArea MediaInfo <20.03 - Buffer Overflow
CVSS 7.8
CVE-2020-9628 HIGH
Adobe DNG Software Development Kit < 1.5 - Out-of-bounds Read
CVSS 7.5
Details
Vulnerabilities 8,912
Links
MITRE CWE Entry Search this CWE With Exploits