CyberSecBulletin

Out-of-bounds Read

CWE-125

The product reads data past the end, or before the beginning, of the intended buffer.

We track 2,559 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9. 19 have been exploited in real attacks.

How this weakness is prevented

  • Architecture and Design: Use a language that provides appropriate memory abstractions.

Latest Out-of-bounds Read vulnerabilities

  • 7.8 High severity

    Teamcenter Visualization V14.2: Out-of-bounds Read

    CVE-2024-45465Siemens

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All ve

  • 7.8 High severity

    Teamcenter Visualization V14.2: Out-of-bounds Read

    CVE-2024-45464Siemens

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All ve

  • 7.8 High severity

    Teamcenter Visualization V14.2: Out-of-bounds Read

    CVE-2024-45463Siemens

    A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All ve

  • 8.0 High severity

    vigor3910_firmware: Out-of-bounds Read

    CVE-2024-41595DrayTek

    DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations.

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Out-of-bounds Read

    CVE-2024-47136JTEKT ELECTRONICS

    Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Vers

  • 7.8 High severity

    Navisworks Freedom: Out-of-bounds Read

    CVE-2024-7670Autodesk

    A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the cur

  • 8.1 High severity

    FreeBSD: Out-of-bounds Read

    CVE-2024-41721FreeBSD

    An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.

  • 7.5 High severity

    OpenPLC_v3: Out-of-bounds Read

    CVE-2024-36981OpenPLCEPSS 1.02%

    An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of

  • 7.5 High severity

    OpenPLC_v3: Out-of-bounds Read

    CVE-2024-36980OpenPLCEPSS 1.1%

    An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31198Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31195Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTable::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31194Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortStats::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31193Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroup::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31192Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroupDesc::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31191Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeter::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31190Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeterConfig::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31189Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartRequestTableFeatures::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31188Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTableFeatures::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31187Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortDescription::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31186Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31184Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterStats::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31183Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::Hello::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31181Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupStats::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31180Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupDesc::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31179Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropInstruction::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31178Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropNextTables::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31177Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). This vulnerability is associated with program routines fluid_msg::of13::TableFeaturePropActions::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31176Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropOXM::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31174Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::FeaturesReply::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31173Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyFlow::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31172Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyTable::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31171Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyPort::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31170Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyQueue::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31169Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31168Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::EchoCommon::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31166Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::HelloElemVersionBitmap::unpack. This issue affects libfluid: 0.1.0.

  • 7.1 High severity

    Linux: Out-of-bounds Read

    CVE-2024-46764Linux

    In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name string is 1 and the value of name[0] is NULL byte, an OOB vulnerability occurs in btf_name_valid_section()

  • 7.1 High severity

    Linux: Out-of-bounds Read

    CVE-2024-46747Linux

    In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup report_fixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing

  • 7.1 High severity

    Linux: Out-of-bounds Read

    CVE-2024-46743Linux

    In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When of_irq_parse_raw() is invoked with a device address smaller than the interrupt parent node (from #address-cells pro

  • 7.1 High severity

    Linux: Out-of-bounds Read

    CVE-2024-46731Linux

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mc_data[] when i = 0.