CWE-125

Out-of-bounds Read

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product reads data past the end, or before the beginning, of the intended buffer.

8,925 vulnerabilities with CWE-125
CVE-2018-13421 CRITICAL
fast-cpp-csv-parser < 2018-07-06 - Heap-Based Buffer Over-Read in io::trim_chars
CVSS 9.8
CVE-2018-5886 HIGH
Android - Out-of-bounds Read in ADSPRPC Command Pointer Validation
CVSS 7.5
CVE-2018-5864 MEDIUM
Android <2018-07-05 - Buffer Overflow/Info Disclosure
CVSS 5.5
CVE-2018-5855 CRITICAL
Android <2018-07-05 - Buffer Overflow
CVSS 9.8
CVE-2018-5897 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.5
CVE-2018-5896 HIGH
Android <2018-06-05 - Memory Corruption
CVSS 7.1
CVE-2018-5895 MEDIUM
Android <2018-06-05 - Buffer Overflow
CVSS 5.5
CVE-2018-5894 MEDIUM
Qualcomm Multiple Chipsets Firmware - Out-of-bounds Read in MP4 Parser
CVSS 6.5
CVE-2018-5888 HIGH
Android <2018-06-05 - Memory Corruption
CVSS 7.8
CVE-2018-5887 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.8
CVE-2018-5882 CRITICAL
Qualcomm MDM9206 and other Snapdragon Firmware - Out-of-bounds Read in FLAC Comment Block Parser
CVSS 9.8
CVE-2018-5836 MEDIUM
Android <2018-06-05 - Buffer Overflow
CVSS 5.5
CVE-2018-5829 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.5
CVE-2018-3569 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.8
CVE-2018-12910 CRITICAL
libsoup 2.63.2 - Out-of-bounds Read via Empty Hostname in get_cookies
CVSS 9.8
CVE-2018-13305 HIGH
FFmpeg 4.0.1 - Out-of-bounds Read in vc1_put_blocks_clamped
CVSS 8.1
CVE-2018-13300 HIGH
FFmpeg 3.2 and 4.0.1 - Out-of-bounds Read in AVI to MPEG4 Conversion
CVSS 8.1
CVE-2018-13112 HIGH
Tcpreplay 4.3.0 beta1 - Denial of Service via Crafted Packets in get_l2len
CVSS 7.5
CVE-2018-13099 MEDIUM
Linux Kernel < 4.4 - Out-of-Bounds Read
CVSS 5.5
CVE-2018-13098 MEDIUM
Linux Kernel < 4.17.3 - Denial of Service via F2FS Inode Handling
CVSS 5.5
CVE-2018-13097 MEDIUM
Linux Kernel < 4.17.3 - Denial of Service via Corrupted F2FS Image
CVSS 5.5
CVE-2018-13096 MEDIUM
Linux Kernel < 4.14 - Denial of Service via Crafted F2FS Image
CVSS 5.5
CVE-2018-13026 CRITICAL
gpmf-parser 1.1.2 - Heap-Based Buffer Over-Read in GPMF_Type
CVSS 9.8
CVE-2018-13011 CRITICAL
gpmf-parser 1.1.2 - Heap-Based Buffer Over-Read in GPMF_Validate
CVSS 9.8
CVE-2018-13009 CRITICAL
gpmf-parser 1.1.2 - Heap-Based Buffer Over-Read in GPMF_Next
CVSS 9.8
Details
Vulnerabilities 8,925
Links
MITRE CWE Entry Search this CWE With Exploits