CWE-125— Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.— MITRE CWE catalog
9,448 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-125page 2 of 189
- CVE-2012-0259MEDIUMCVSS 6.5EG 6.52012-06-05
The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers …
- CVE-2012-1571MEDIUMCVSS 6.5EG 6.52012-07-17
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
- CVE-2012-1798MEDIUMCVSS 6.5EG 6.52012-06-05
The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
- CVE-2012-3995HIGHCVSS v2 9.3EG 9.32012-10-10
The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or …
- CVE-2012-4428HIGHCVSS 7.5EG 7.52019-12-02
openslp: SLPIntersectStringList()' Function has a DoS vulnerability
- CVE-2012-5109MEDIUMCVSS v2 5.0EG 5.02012-10-09
The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression.
- CVE-2012-5110MEDIUMCVSS v2 5.0EG 5.02012-10-09
The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- CVE-2012-5130MEDIUMCVSS v2 5.0EG 5.02012-11-28
Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- CVE-2013-0767HIGHCVSS v2 10.0EG 10.02013-01-13
The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey …
- CVE-2013-0778HIGHCVSS v2 9.3EG 9.32013-02-19
The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecif…
- CVE-2013-0779HIGHCVSS v2 9.3EG 9.32013-02-19
The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspe…
- CVE-2013-0888MEDIUMCVSS v2 5.0EG 5.02013-02-23
Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a "user gesture check for danger…
- CVE-2013-2805HIGHCVSS 7.5EG 7.52019-03-26
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with a…
- CVE-2013-2807HIGHCVSS 7.5EG 7.52019-03-26
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect va…
- CVE-2013-7456HIGHCVSS 7.6EG 7.62016-08-07
gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have uns…
- CVE-2014-0160CRITICALCVSS 7.5EG 9.0⚠ KEV2014-04-07
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger …
- CVE-2014-0777HIGHCVSS v2 7.8EG 7.82014-04-11
The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted packet.
- CVE-2014-125017HIGHCVSS 7.3EG 7.82022-06-18
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes I…
- CVE-2014-1497HIGHCVSS 8.8EG 8.82014-03-19
The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap me…
- CVE-2014-1508CRITICALCVSS 9.1EG 9.12014-03-19
The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause …
- CVE-2014-1522HIGHCVSS v2 9.3EG 9.32014-04-30
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bound…
- CVE-2014-2031MEDIUMCVSS 5.9EG 5.92018-03-20
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries…
- CVE-2014-2032MEDIUMCVSS 5.9EG 5.92018-03-20
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries…
- CVE-2014-2896CRITICALCVSS 9.8EG 9.82020-01-28
The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read.
- CVE-2014-2897CRITICALCVSS 9.8EG 9.82020-01-28
The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to have unspecified impact via a crafted HMAC, which triggers an out-of-bounds read.
- CVE-2014-2898CRITICALCVSS 9.8EG 9.82020-01-28
wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verifi…
- CVE-2014-3145MEDIUMCVSS v2 4.9EG 4.92014-05-11
The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service…
- CVE-2014-3180CRITICALCVSS 9.1EG 9.12019-11-06
In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is dispute…
- CVE-2014-3675MEDIUMCVSS v2 5.0EG 5.02014-10-22
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
- CVE-2014-4341MEDIUMCVSS v2 5.0EG 5.02014-07-20
MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.
- CVE-2014-7825HIGHCVSS 7.8EG 7.82014-11-10
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypa…
- CVE-2014-8127MEDIUMCVSS 6.5EG 6.52017-06-26
LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c…
- CVE-2014-8354MEDIUMCVSS 6.5EG 6.52017-04-11
The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
- CVE-2014-8355MEDIUMCVSS 5.5EG 5.52017-04-11
PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
- CVE-2014-8483MEDIUMCVSS v2 5.0EG 5.02014-11-06
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string.
- CVE-2014-8562MEDIUMCVSS 5.5EG 5.52017-04-11
DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
- CVE-2014-8716MEDIUMCVSS 6.2EG 6.22017-04-11
The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).
- CVE-2014-9657HIGHCVSS v2 7.5EG 7.52015-02-08
The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impa…
- CVE-2014-9658HIGHCVSS v2 7.5EG 7.52015-02-08
The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact …
- CVE-2014-9669MEDIUMCVSS v2 6.8EG 6.82015-02-08
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
- CVE-2014-9816MEDIUMCVSS 5.5EG 5.52017-03-30
ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.
- CVE-2014-9818MEDIUMCVSS 5.5EG 5.52017-03-30
ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.
- CVE-2014-9829MEDIUMCVSS 6.5EG 6.52017-04-05
coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.
- CVE-2014-9837MEDIUMCVSS 6.5EG 6.52017-04-11
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.
- CVE-2014-9844MEDIUMCVSS 5.5EG 5.52017-03-20
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
- CVE-2015-2325HIGHCVSS 7.8EG 7.82020-01-14
The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression…
- CVE-2015-2326MEDIUMCVSS 5.5EG 5.52020-01-14
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subrou…
- CVE-2015-5327MEDIUMCVSS 6.5EG 6.52017-09-25
Out-of-bounds memory read in the x509_decode_time function in x509_cert_parser.c in Linux kernels 4.3-rc1 and after.
- CVE-2015-7506MEDIUMCVSS 6.5EG 6.52020-02-18
The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.
- CVE-2015-7507HIGHCVSS 7.5EG 7.52020-02-18
libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.
Map vulnerabilities like CWE-125 to your infrastructure
EchelonGraph correlates every CVE — across CWE-125 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →