Vulnerabilities (CVE)

Filtered by CWE-125
Total 9106 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-20152 1 Cisco 1 Identity Services Engine 2026-06-17 N/A 8.6 HIGH
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a specific authentication request to a network access device (NAD) that uses Cisco ISE for authentication, authorization, and accounting (AAA). A successful exploit could allow the attacker to cause Cisco ISE to reload.
CVE-2025-20102 1 Openatom 1 Openharmony 2026-06-17 N/A 3.3 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2025-20101 2026-06-17 N/A 8.4 HIGH
Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
CVE-2025-20042 1 Openatom 1 Openharmony 2026-06-17 N/A 5.5 MEDIUM
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.
CVE-2025-20026 1 Intel 4 Proset\/wireless Wifi, Wi-fi 7 Be200, Wi-fi 7 Be201 and 1 more 2026-06-17 N/A 6.1 MEDIUM
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2025-20021 1 Openatom 1 Openharmony 2026-06-17 N/A 3.3 LOW
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2025-20001 1 High-logic 1 Fontcreator 2026-06-17 N/A 6.5 MEDIUM
An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability.
CVE-2025-1932 1 Mozilla 2 Firefox, Thunderbird 2026-06-17 N/A 8.1 HIGH
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
CVE-2025-1919 1 Google 1 Chrome 2026-06-17 N/A 8.8 HIGH
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-1918 1 Google 1 Chrome 2026-06-17 N/A 8.8 HIGH
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)
CVE-2025-1914 1 Google 1 Chrome 2026-06-17 N/A 8.8 HIGH
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2025-1675 1 Zephyrproject 1 Zephyr 2026-06-17 N/A 8.2 HIGH
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
CVE-2025-1674 1 Zephyrproject 1 Zephyr 2026-06-17 N/A 8.2 HIGH
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
CVE-2025-1673 1 Zephyrproject 1 Zephyr 2026-06-17 N/A 8.2 HIGH
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.
CVE-2025-1659 1 Autodesk 1 Navisworks 2026-06-17 N/A 7.8 HIGH
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1658 1 Autodesk 1 Navisworks 2026-06-17 N/A 7.8 HIGH
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1652 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2026-06-17 N/A 7.8 HIGH
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1433 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2026-06-17 N/A 7.8 HIGH
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1431 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2026-06-17 N/A 7.8 HIGH
A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1428 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2026-06-17 N/A 7.8 HIGH
A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.