CWE-125 - Out-of-bounds Read

CWE Weakness

Threat entity extracted from intelligence sources

Entities›cwe›CWE-125 - Out-of-bounds Read

Frequency

524

occurrences

First Seen

April 16, 2026

Last Seen

September 30, 2026

API

Overview

Recent Events

Profile

1 / 2

Tools

Openssl Google Chrome Nginx Ffmpeg

CVEs

CVE-2026-71401 CVE-2026-71402 CVE-2025-54505 CVE-2026-16531 CVE-2026-16526 CVE-2026-16524 CVE-2026-16530 CVE-2026-16529

REC

Recon

No techniques detected

Resource Dev

No techniques detected

Initial Access

T1566.001 - Spearphishing Attachment

Execution

T1203 - Exploitation for Client ExecutionT1059 - Command and Scripting Interpreter

Persistence

No techniques detected

Priv Esc

T1068 - Exploitation for Privilege Escalation

Defense Evasion

No techniques detected

Cred Access

No techniques detected

Discovery

No techniques detected

Lateral Mov

No techniques detected

Collection

T1005 - Data From Local System

No techniques detected

Exfil

T1041 - Exfiltration Over C2 ChannelT1567 - Exfiltration Over Web Service

Impact

No techniques detected

8 techniques detected across 5 tactics

Related Clusters (50)

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild

Sep 4·60 sources

Critical Command Injection and DoS Vulnerabilities in openSUSE pcp

Aug 6·12 sources

Critical Vulnerabilities in dnsmasq Expose Systems to DoS and Code Execution Risks

May 13·29 sources

Critical Vulnerabilities in X.Org X Server Lead to Potential DoS and Privilege Escalation

Aug 13·2 sources

Critical Exim Vulnerabilities Affecting Ubuntu and Debian Systems

3d ago·2 sources

Critical Vulnerabilities in ClamAV Affecting Multiple File Parsers

Sep 15·3 sources

Critical Vulnerabilities in Fedora Chromium Browser Affecting Multiple Versions

Sep 8·8 sources

Oracle Linux 9 Vulnerabilities Lead to Critical Security Advisories

Jun 25·4 sources

Critical Use After Free Vulnerabilities in Fedora Chromium Update

Jun 14·2 sources

Critical Vulnerabilities in Linux Kernel Affect AMD Processors

Jul 20·42 sources

Critical PHP SOAP Extension Vulnerabilities Enable Remote Code Execution

May 12·2 sources

Microsoft Issues Critical Security Patches for August 2026

Aug 12·2 sources

Critical Out-of-Bounds Vulnerability in GNU Libidn Affects Fedora Systems

Aug 12·3 sources

SUSE Libarchive Vulnerabilities Prompt Urgent Security Updates

Jun 25·3 sources

openSUSE Tor Security Updates Address Multiple Vulnerabilities

May 13·2 sources

Critical PostgreSQL Vulnerabilities Disclosed Affecting Multiple Versions

Aug 20·2 sources

Multiple SUSE Vulnerabilities Exploited: Heap Overflow and Out-of-Bounds Issues

3d ago·8 sources

Critical Chrome Update Addresses 33 Security Flaws Including CVE-2026-102331

1d ago·3 sources

SUSE Redis7 Buffer Read Vulnerability CVE-2026-92925 Exploited

2d ago·3 sources

SUSE Releases Multiple Security Updates for xorg-x11 with Critical Vulnerabilities

Jun 2·8 sources

Critical xrdp Vulnerabilities Affecting Ubuntu Systems

Jun 25·2 sources

Fedora perl-DBI Updates Address Critical Denial of Service Vulnerabilities

Jul 23·2 sources

Multiple Critical Vulnerabilities Discovered in Samba Affecting Unix Systems

Jul 28·9 sources

openSUSE Python-msgpack Buffer Overflow Vulnerability Fix Released

Sep 3·7 sources

Critical Zoom Vulnerabilities Enable Remote Code Execution via AI-Driven Exploits

Aug 11·30 sources

Critical Vulnerabilities in openSUSE NGINX Require Immediate Attention

Jul 28·3 sources

Critical Vulnerabilities in ffmpeg Affecting openSUSE and SUSE Systems

Aug 8·4 sources

SUSE Xen Vulnerabilities Addressed in Update 2026-3423

Jul 30·7 sources

Critical libXpm Vulnerability Discovered in Ubuntu 26.04 LTS

Jul 23·2 sources

Critical Vulnerabilities Patched in OpenSSL and WolfSSL

1d ago·7 sources

HEIF Heist: Remote Code Execution Vulnerabilities Exploited in Major Platforms

Sep 21·3 sources

openSUSE 389-ds Heap Overflow Vulnerabilities Lead to DoS Risks

Jul 21·3 sources

AI Discovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Vulnerabilities

Jun 6·4 sources

Critical ImageMagick Vulnerabilities Affecting Multiple Ubuntu Versions

Jun 25·2 sources

SUSE Linux Micro rsync Vulnerabilities Lead to Important Security Updates

May 21·7 sources

Critical Memory-Safety Vulnerabilities in Fedora's perl-YAML-Syck Module

Jul 23·3 sources

Critical Denial of Service Vulnerabilities in SUSE Linux QEMU

Jun 2·6 sources

1 / 10

Related Entities

Data Breach Zero-day Exploit DDoS Denial of Service Command Injection Sql Injection Man-in-the-Middle Ubuntu Fedora OpenSUSE SuSE CVE-2026-71401

CWE-125 - Out-of-bounds Read

Overview

Recent Events

Profile

Tools

CVEs

Related Clusters (50)

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild

Critical Command Injection and DoS Vulnerabilities in openSUSE pcp

Critical Vulnerabilities in dnsmasq Expose Systems to DoS and Code Execution Risks

Multiple rlottie Vulnerabilities Lead to Denial of Service Risks

Critical Vulnerabilities in perl-DBI Affecting SUSE Systems

Citrix NetScaler Vulnerabilities Enable DoS and Memory Disclosure Attacks

Critical Auth Bypass Vulnerability in SUSE Elemental Systems (CVE-2026-33186)

Multiple CVEs Disclosed on September 8, 2026, Affecting Microsoft Products

Critical Buffer Overflow Vulnerabilities in glibc Affect Fedora Systems

Critical Vulnerabilities Found in nginx Affecting openSUSE Leap 15.6

Multiple rsync Vulnerabilities Affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS

Multiple Oracle Linux Versions Face Critical Vulnerabilities in PCP Tools

Critical Vulnerabilities in Rocky Linux Affecting Multiple Components

Oracle Linux Kernel ptrace Vulnerability CVE-2026-46333 Disclosed

Critical Denial of Service Vulnerabilities in openSUSE freerdp

Cisco IOS XR Vulnerabilities Require Immediate Patching

Critical Vulnerabilities in X.Org X Server Lead to Potential DoS and Privilege Escalation

Critical Exim Vulnerabilities Affecting Ubuntu and Debian Systems

Critical Vulnerabilities in ClamAV Affecting Multiple File Parsers

Critical Vulnerabilities in Fedora Chromium Browser Affecting Multiple Versions

Oracle Linux 9 Vulnerabilities Lead to Critical Security Advisories

Critical Use After Free Vulnerabilities in Fedora Chromium Update

Critical Vulnerabilities in Linux Kernel Affect AMD Processors

Critical PHP SOAP Extension Vulnerabilities Enable Remote Code Execution

Microsoft Issues Critical Security Patches for August 2026

Critical Out-of-Bounds Vulnerability in GNU Libidn Affects Fedora Systems

SUSE Libarchive Vulnerabilities Prompt Urgent Security Updates

openSUSE Tor Security Updates Address Multiple Vulnerabilities

Critical PostgreSQL Vulnerabilities Disclosed Affecting Multiple Versions

Multiple SUSE Vulnerabilities Exploited: Heap Overflow and Out-of-Bounds Issues

Critical Chrome Update Addresses 33 Security Flaws Including CVE-2026-102331

SUSE Redis7 Buffer Read Vulnerability CVE-2026-92925 Exploited

SUSE Releases Multiple Security Updates for xorg-x11 with Critical Vulnerabilities

Critical xrdp Vulnerabilities Affecting Ubuntu Systems

Fedora perl-DBI Updates Address Critical Denial of Service Vulnerabilities

Multiple Critical Vulnerabilities Discovered in Samba Affecting Unix Systems

openSUSE Python-msgpack Buffer Overflow Vulnerability Fix Released

Critical Zoom Vulnerabilities Enable Remote Code Execution via AI-Driven Exploits

Critical Vulnerabilities in openSUSE NGINX Require Immediate Attention

Critical Vulnerabilities in ffmpeg Affecting openSUSE and SUSE Systems

SUSE Xen Vulnerabilities Addressed in Update 2026-3423

Critical libXpm Vulnerability Discovered in Ubuntu 26.04 LTS

Critical Vulnerabilities Patched in OpenSSL and WolfSSL

HEIF Heist: Remote Code Execution Vulnerabilities Exploited in Major Platforms

openSUSE 389-ds Heap Overflow Vulnerabilities Lead to DoS Risks

AI Discovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Vulnerabilities

Critical ImageMagick Vulnerabilities Affecting Multiple Ubuntu Versions

SUSE Linux Micro rsync Vulnerabilities Lead to Important Security Updates

Critical Memory-Safety Vulnerabilities in Fedora's perl-YAML-Syck Module

Critical Denial of Service Vulnerabilities in SUSE Linux QEMU

Related Articles (50)

HackerOne Bug Bounty Disclosure: connector-c-out-of-bounds-read-in-unpack-fields-from-short-metadata-field-michal

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

OpenSSL Flaw Could Expose Heap Memory and Crash Applications

OpenSSL 4.0.3 Released With High-Severity Security Fixes

CVE 2026 102559

CVE 2026 102560

Ubuntu FreeIPMI Critical Denial Of Service Buffer Overflow Vuln USN-8843

Apple patches CoreGraphics zero-day used in 'extremely sophisticated' targeted attacks on ...

USN-8843-1: FreeIPMI vulnerabilities

SUSE swtpm Moderate Out-Of-Bounds Issue Advisory 2026-4366-1 CVE-2026

SUSE Redis Important Out-Of-Bounds Issue Vuln 2026-4370

SUSE exiv2 Important Heap Overflow Issues Advisory 2026-4374

SUSE Redis7 Significant Buffer Read Vulnerability CVE-2026

SUSE ImageMagick Important Buffer Overflow and Memory Leak Fix 2026-4376

SUSE Redis7 Important Out-of-Bounds Exploit Advisory 2026-4377

SUSE 15 SP7 libheif Important Security Fix Advisory 2026-4378

Ubuntu 26.04 LTS Exim Critical Remote Code Exec Denial of Service 8834

SUSE libtpms Moderate Heap Overflow Vulnerability SUSE-SU-2026-23878

SUSE swtpm Moderate Out-of-Bounds Read Vulnerability Fix 2026-23879

Security Bulletins

Malicious HEIF Upload Reached OpenAI's Internal GitHub, Researchers Reveal