Weaknesses of type CWE-125

4,339 results
CVE-2025-11494MEDIUMGNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-boundsEPSS 0.2%CVE-2025-1399LOWOut-of-bounds Read in libplctag libraryEPSS 0.2%CVE-2025-1400LOWOut-of-bounds Read in libplctag libraryEPSS 0.2%CVE-2026-11299MEDIUMInteger overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fromEPSS 0.2%CVE-2021-29569LOWHeap out of bounds read in `RequantizationRange`EPSS 0.2%CVE-2024-54518MEDIUMThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOSEPSS 0.2%CVE-2023-20240MEDIUMMultiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local atEPSS 0.2%CVE-2025-54260HIGHSubstance3D - Modeler | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2026-45615HIGHmouse07410/asn1c: 1-byte Heap Out-of-Bounds Read in `INTEGER_decode_oer` via Malformed OER PayloadEPSS 0.2%CVE-2025-43366MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to disclose copEPSS 0.2%CVE-2026-54500MEDIUMOj: intern.c form_attr has an uninitialized stack readEPSS 0.2%CVE-2023-20241MEDIUMMultiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local atEPSS 0.2%CVE-2026-23568MEDIUMOut-of-bounds read vulnerability in Content Distribution ServiceEPSS 0.2%CVE-2022-40134MEDIUMAn information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access andEPSS 0.2%CVE-2026-28832HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS TEPSS 0.2%CVE-2022-40135MEDIUMAn information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and EPSS 0.2%CVE-2024-22384LOWOut-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 may allow an authenticEPSS 0.2%CVE-2022-40136MEDIUMAn information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker wiEPSS 0.2%CVE-2024-47039CRITICALOOB Read in the android.hardware.boot.IBootControl/default serviceEPSS 0.2%CVE-2023-38527HIGHA vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter ViEPSS 0.2%