Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CWE-125

MITRE ↗

Out-of-bounds Read

717
CRITICAL
3,828
HIGH
4,120
MEDIUM
505
LOW
9,243 CVEs · Page 39/185
7.1
CVE-2025-64720

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)

7.1
CVE-2025-66293

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)

7.1
CVE-2025-64893

DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposur

7.0
CVE-2025-2784

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_ins

7.0
CVE-2022-50079

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream en

7.0
CVE-2025-38342

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node

7.0
CVE-2025-55681

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

6.8
CVE-2024-33061

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel

6.8
CVE-2022-49051

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Fix out-of-bounds accesses in RX

6.7
CVE-2025-20660

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati

6.7
CVE-2025-20661

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati

6.7
CVE-2025-20662

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati

6.7
CVE-2024-45568

Memory corruption due to improper bounds check while command handling in camera-kernel driver.

6.7
CVE-2025-54633

Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of thi

6.7
CVE-2025-20776

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of

6.6
CVE-2024-23366

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

6.6
CVE-2025-21226

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21227

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21228

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21229

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21232

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21249

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21255

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21256

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21258

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21260

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21261

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21263

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21265

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21310

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

6.6
CVE-2024-56187

In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the

6.6
CVE-2025-24987

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attac

6.6
CVE-2025-24988

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attac

6.6
CVE-2025-2884

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack

6.6
CVE-2025-54643

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe

6.6
CVE-2025-54644

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe

6.6
CVE-2025-47183

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer whil

6.6
CVE-2025-58314

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulner

6.5
CVE-2025-21600

An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS E

6.5
CVE-2024-36504

An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0

6.5
CVE-2024-54478

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 18

6.5
CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3

6.5
CVE-2025-21212

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5
CVE-2025-21216

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5
CVE-2025-21254

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5
CVE-2025-20659

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

6.5
CVE-2025-29832

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

Frequently Asked Questions

What is CWE-125?

CWE-125 (Out-of-bounds Read) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-125?

There are 10,972 CVE records associated with CWE-125 in our database. Of these, 717 are critical severity, 3828 are high severity, and 4120 are medium severity.

How can I protect against CWE-125 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-125 using AI-powered security agents.

Detect CWE-125 Vulnerabilities

CyberStrike's AI agents automatically detect out-of-bounds read vulnerabilities across your infrastructure.

Get Started