CWE-125

Out-of-bounds Read

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product reads data past the end, or before the beginning, of the intended buffer.

8,951 vulnerabilities with CWE-125
CVE-2014-7825 HIGH
Linux Kernel 2.6.32-3.2.65 - Out-of-bounds Read via Private Syscall Numbers in perf Subsystem
CVSS 7.8
CVE-2014-8483
Canonical Ubuntu Linux - Out-of-Bounds Read
CVE-2014-3675
shim 0.3-0.8 - Denial of Service via Crafted DHCPv6 Packet
CVE-2014-4341
MIT Kerberos 5 < 1.12.2 - Denial of Service via Invalid GSSAPI Token Injection
CVE-2014-3145
Linux Kernel < 3.14.3 - Denial of Service via BPF Extension Out-of-bounds Read
CVE-2014-1522
Fedora < 29.0 - Out-of-Bounds Read
CVE-2014-0777
IOServer OPC Drivers < 1.0.20 - Denial of Service via Crafted Modbus Packet
CVE-2014-0160 HIGH KEV
OpenSSL 1.0.1-1.0.1f - Out-of-bounds Read via Heartbeat Extension
CVSS 7.5
CVE-2014-1508 CRITICAL
Firefox < 28.0 - Out-of-bounds Read via MathML Polygon Rendering
CVSS 9.1
CVE-2014-1497 HIGH
Firefox < 28.0 - Out-of-bounds Read via WAV File Processing
CVSS 8.8
CVE-2013-2805 HIGH
Rockwell Automation RSLinx Enterprise Software - Buffer Overflow
CVSS 7.5
CVE-2013-2807 HIGH
Rockwell Automation RSLinx Enterprise Software - Logic Error
CVSS 7.5
CVE-2013-7456 HIGH
libgd < 2.1.1 - Out-of-bounds Read via imagescale Function
CVSS 7.6
CVE-2013-3245 MEDIUM
VideoLAN VLC Media Player <2.0.7 - DoS
CVSS 6.3
CVE-2013-0888
Skia <25.0.1364.97-25.0.1364.99 - DoS
CVE-2013-0779
Mozilla Firefox <19.0, Thunderbird <17.0.3, SeaMonkey <2.16 - RCE
CVE-2013-0778
Mozilla Firefox <19.0, Thunderbird <17.0.3, SeaMonkey <2.16 - RCE
CVE-2013-0767
Mozilla Firefox < 18.0 - Out-of-bounds Read via nsSVGPathElement::GetPathLengthScale
CVE-2012-4428 HIGH
OpenSLP - Denial of Service via SLPIntersectStringList Function
CVSS 7.5
CVE-2012-5130
Skia <23.0.1271.91 - DoS
CVE-2012-3995
Firefox < 16.0 - Out-of-bounds Read in IsCSSWordSpacingSpace
CVE-2012-5110
Google Chrome < 22.0.1229.92 - Denial of Service via Out-of-bounds Read in Compositor
CVE-2012-5109
Google Chrome < 22.0.1229.92 - Denial of Service via ICU Regular Expression Handling
CVE-2012-1571 MEDIUM
file < 5.11 and libmagic - Denial of Service via Crafted CDF File
CVSS 6.5
CVE-2012-1798 MEDIUM
ImageMagick < 6.7.6-3 - Denial of Service via Crafted EXIF IFD in TIFF Image
CVSS 6.5
Details
Vulnerabilities 8,951
Links
MITRE CWE Entry Search this CWE With Exploits