VYPR

CWE-125

Out-of-bounds Read

BaseDraft

Description

The product reads data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-540

CVEs mapped to this weakness (9,427)

page 228 of 472
  • CVE-2023-43683MedAug 14, 2025
    risk 0.42cvss 6.5epss 0.00

    An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). A Stack buffer out-of-bounds access exists because of an integer underflow when handling newline characters.

  • CVE-2025-21465MedAug 6, 2025
    risk 0.42cvss 6.5epss 0.00

    Information disclosure while processing the hash segment in an MBN file.

  • CVE-2025-21464MedAug 6, 2025
    risk 0.42cvss 6.5epss 0.00

    Information disclosure while reading data from an image using specified offset and size parameters.

  • CVE-2025-47152MedAug 5, 2025
    risk 0.42cvss 6.5epss 0.01

    An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure…

  • CVE-2025-27931MedAug 5, 2025
    risk 0.42cvss 6.5epss 0.01

    An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive…

  • CVE-2025-49681MedJul 8, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-49671MedJul 8, 2025
    risk 0.42cvss 6.5epss 0.01

    Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-47978MedJul 8, 2025
    risk 0.42cvss 6.5epss 0.02

    Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

  • CVE-2025-20693MedJul 8, 2025
    risk 0.42cvss 6.5epss 0.00

    In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2025-32715MedJun 10, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-20001MedJun 2, 2025
    risk 0.42cvss 6.5epss 0.00

    An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger…

  • CVE-2024-49197MedMay 27, 2025
    risk 0.42cvss 6.5epss 0.00

    An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access.

  • CVE-2025-4969MedMay 21, 2025
    risk 0.42cvss 6.5epss 0.01

    A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read…

  • CVE-2024-56427MedMay 14, 2025
    risk 0.42cvss 6.5epss 0.00

    An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed…

  • CVE-2025-29961MedMay 13, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-29960MedMay 13, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-29836MedMay 13, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-29835MedMay 13, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2025-29832MedMay 13, 2025
    risk 0.42cvss 6.5epss 0.01

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  • CVE-2023-42982MedApr 11, 2025
    risk 0.42cvss 6.4epss 0.00

    Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.