CWE-125
Out-of-bounds Read
Description
The product reads data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-540
CVEs mapped to this weakness (9,795)
page 486 of 490| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-1908 | Hig | 0.00 | 8.1 | 0.01 | May 27, 2022 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. | ||
| CVE-2022-1907 | Hig | 0.00 | 8.1 | 0.01 | May 27, 2022 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. | ||
| CVE-2022-1899 | Cri | 0.00 | 9.1 | 0.01 | May 26, 2022 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. | ||
| CVE-2022-1851 | Hig | 0.00 | 7.8 | 0.02 | May 25, 2022 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. | ||
| CVE-2022-1769 | Hig | 0.00 | 7.8 | 0.00 | May 17, 2022 | Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. | ||
| CVE-2022-1587 | Cri | 0.00 | 9.1 | 0.03 | May 16, 2022 | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers. | ||
| CVE-2022-1586 | Cri | 0.00 | 9.1 | 0.03 | May 16, 2022 | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was… | ||
| CVE-2022-1714 | Hig | 0.00 | 7.1 | 0.00 | May 13, 2022 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. | ||
| CVE-2022-29368 | Hig | 0.00 | 7.1 | 0.01 | May 12, 2022 | Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c. | ||
| CVE-2022-1623 | Med | 0.00 | 5.5 | 0.01 | May 11, 2022 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. | ||
| CVE-2022-1622 | Med | 0.00 | 5.5 | 0.02 | May 11, 2022 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. | ||
| CVE-2022-1629 | Hig | 0.00 | 7.8 | 0.02 | May 10, 2022 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution | ||
| CVE-2022-1534 | Hig | 0.00 | 7.1 | 0.00 | Apr 29, 2022 | Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a… | ||
| CVE-2022-1533 | Hig | 0.00 | 7.8 | 0.00 | Apr 29, 2022 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution. | ||
| CVE-2022-1441 | Hig | 0.00 | 7.8 | 0.01 | Apr 25, 2022 | MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content… | ||
| CVE-2022-1452 | Hig | 0.00 | 7.1 | 0.01 | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other… | ||
| CVE-2022-1451 | Hig | 0.00 | 7.1 | 0.01 | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory… | ||
| CVE-2022-1427 | Hig | 0.00 | 7.8 | 0.00 | Apr 23, 2022 | Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited. | ||
| CVE-2022-1297 | Cri | 0.00 | 9.1 | 0.01 | Apr 11, 2022 | Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash. | ||
| CVE-2022-1296 | Cri | 0.00 | 9.1 | 0.01 | Apr 11, 2022 | Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash. |
- risk 0.00cvss 8.1epss 0.01
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- risk 0.00cvss 8.1epss 0.01
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- risk 0.00cvss 9.1epss 0.01
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
- risk 0.00cvss 7.8epss 0.02
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
- risk 0.00cvss 7.8epss 0.00
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
- risk 0.00cvss 9.1epss 0.03
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
- risk 0.00cvss 9.1epss 0.03
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was…
- risk 0.00cvss 7.1epss 0.00
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- risk 0.00cvss 7.1epss 0.01
Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.
- risk 0.00cvss 5.5epss 0.01
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- risk 0.00cvss 5.5epss 0.02
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- risk 0.00cvss 7.8epss 0.02
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
- risk 0.00cvss 7.1epss 0.00
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a…
- risk 0.00cvss 7.8epss 0.00
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.
- risk 0.00cvss 7.8epss 0.01
MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content…
- risk 0.00cvss 7.1epss 0.01
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other…
- risk 0.00cvss 7.1epss 0.01
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory…
- risk 0.00cvss 7.8epss 0.00
Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.
- risk 0.00cvss 9.1epss 0.01
Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
- risk 0.00cvss 9.1epss 0.01
Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.