CWE-125— Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.— MITRE CWE catalog

8,233 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-125page 1 of 165

CVE-1999-0006CRITICALCVSS 9.8EG 9.8
1998-07-14
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVE-1999-0022HIGHCVSS 7.8EG 7.8
1996-07-03
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-1999-0029HIGHCVSS 8.4EG 8.4
1997-07-16
root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVE-2004-0112MEDIUMCVSS v2 5.0EG 5.0
2004-11-23
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (cr…
CVE-2004-0183MEDIUMCVSS v2 5.0EG 5.0
2004-05-04
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP P…
CVE-2004-0184MEDIUMCVSS v2 5.0EG 5.0
2004-05-04
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte orde…
CVE-2004-0221MEDIUMCVSS v2 5.0EG 5.0
2004-05-04
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by th…
CVE-2004-0421MEDIUMCVSS v2 5.0EG 5.0
2004-08-18
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
CVE-2004-1940MEDIUMCVSS v2 5.0EG 5.0
2004-12-31
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read.
CVE-2006-5393MEDIUMCVSS 5.5EG 5.5
2006-10-18
Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.
CVE-2006-6016MEDIUMCVSS 6.5EG 6.5
2006-11-21
wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.
CVE-2007-3847MEDIUMCVSS v2 5.0EG 5.0
2007-08-23
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trig…
CVE-2009-2523HIGHCVSS v2 10.0EG 10.0
2009-11-11
The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the Ll…
CVE-2010-4577HIGHCVSS 7.5EG 7.5
2010-12-22
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style …
CVE-2011-0984MEDIUMCVSS v2 5.0EG 5.0
2011-02-10
Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-1113MEDIUMCVSS v2 5.0EG 5.0
2011-03-01
Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-1120MEDIUMCVSS v2 5.0EG 5.0
2011-03-01
The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71717.
CVE-2011-1122MEDIUMCVSS v2 5.0EG 5.0
2011-03-01
The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71960.
CVE-2011-1192MEDIUMCVSS v2 5.0EG 5.0
2011-03-11
Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-1445MEDIUMCVSS v2 6.8EG 6.8
2011-05-03
Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-1455MEDIUMCVSS v2 6.8EG 6.8
2011-05-03
Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVE-2011-2345MEDIUMCVSS v2 4.3EG 4.3
2011-06-29
The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2501MEDIUMCVSS 6.5EG 6.5
2011-07-17
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image th…
CVE-2011-2794MEDIUMCVSS v2 6.8EG 6.8
2011-08-03
Google Chrome before 13.0.782.107 does not properly perform text iteration, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2803MEDIUMCVSS v2 6.8EG 6.8
2011-08-03
Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2843MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2844MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2850MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2851MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2858MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-2864MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3025MEDIUMCVSS v2 4.3EG 4.3
2012-02-16
Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3040MEDIUMCVSS v2 4.3EG 4.3
2012-03-05
Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVE-2011-3057MEDIUMCVSS v2 4.3EG 4.3
2012-03-22
Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation.
CVE-2011-3059MEDIUMCVSS v2 6.8EG 6.8
2012-03-30
Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3060MEDIUMCVSS v2 6.8EG 6.8
2012-03-30
Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3066MEDIUMCVSS v2 6.8EG 6.8
2012-04-05
Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3234MEDIUMCVSS v2 5.0EG 5.0
2011-09-19
Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3406HIGHCVSS 8.8EG 8.8
2011-12-14
Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…
CVE-2011-3893MEDIUMCVSS v2 5.0EG 5.0
2011-11-11
Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3905MEDIUMCVSS v2 5.0EG 5.0
2011-12-13
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3906MEDIUMCVSS v2 5.0EG 5.0
2011-12-13
The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3908MEDIUMCVSS v2 5.0EG 5.0
2011-12-13
Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3910MEDIUMCVSS v2 5.0EG 5.0
2011-12-13
Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3911MEDIUMCVSS v2 5.0EG 5.0
2011-12-13
Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3916MEDIUMCVSS v2 5.0EG 5.0
2011-12-13
Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3960MEDIUMCVSS v2 4.3EG 4.3
2012-02-09
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3962MEDIUMCVSS v2 4.3EG 4.3
2012-02-09
Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3963MEDIUMCVSS v2 5.0EG 5.0
2012-02-09
Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3970MEDIUMCVSS v2 4.3EG 4.3
2012-02-09
libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Map vulnerabilities like CWE-125 to your infrastructure

EchelonGraph correlates every CVE — across CWE-125 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →