Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CWE-125 (跨界内存读) — Vulnerability Class 2965

2965 vulnerabilities classified as CWE-125 (跨界内存读). AI Chinese analysis included.

CWE-125, Out-of-bounds Read, is a memory safety weakness where software accesses memory locations outside the designated buffer boundaries, either before its start or past its end. This vulnerability typically arises from insufficient bounds checking during array indexing or pointer arithmetic, allowing attackers to read sensitive data such as stack canaries, cryptographic keys, or internal application state. By leveraging this flaw, adversaries can achieve information disclosure or potentially facilitate further exploitation techniques like heap spraying. Developers mitigate this risk by implementing rigorous input validation, utilizing static analysis tools to detect unsafe memory access patterns, and adopting safer programming languages or libraries that enforce automatic bounds checking. Additionally, employing compiler protections like Address Sanitizer during development helps identify these errors early, ensuring that memory reads remain strictly within allocated limits to prevent unauthorized data exposure.

MITRE CWE Description
The product reads data past the end, or before the beginning, of the intended buffer.
Common Consequences (4)
ConfidentialityRead Memory
An attacker could get secret values such as cryptographic keys, PII, memory addresses, or other information that could be used in additional attacks.
ConfidentialityBypass Protection Mechanism
Out-of-bounds memory could contain memory addresses or other information that can be used to bypass ASLR and other protection mechanisms in order to improve the reliability of exploiting a separate weakness for code execution.
AvailabilityDoS: Crash, Exit, or Restart
An attacker could cause a segmentation fault or crash by causing memory to be read outside of the bounds of the buffer. This is especially likely when the code reads a variable amount of data and assumes that a sentinel exists to stop the read operation, such as a NUL in a string.
OtherVaries by Context
The read operation could produce other undefined or unexpected results.
Mitigations (2)
ImplementationAssume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all potentially relevant properties, including length, type of input, the full range…
Architecture and DesignUse a language that provides appropriate memory abstractions.
Examples (2)
In the following code, the method retrieves a value from an array at a specific array index location that is given as an input parameter to the method
int getValueFromArray(int *array, int len, int index) { int value; // check that the array index is less than the maximum // length of the array if (index < len) { // get the value at the specified index of the array value = array[index]; } // if array index is invalid then output error message // and return value indicating error else { printf("Value is: %d\n", array[index]); value = -1; } return value; }
Bad · C
... // check that the array index is within the correct // range of values for the array if (index >= 0 && index < len) { ...
Good · C
In the following C/C++ example the method processMessageFromSocket() will get a message from a socket, placed into a buffer, and will parse the contents of the buffer into a structure that contains the message length and the message body. A for loop is used to copy the message body into a local character string which will be passed to another method for processing.
int processMessageFromSocket(int socket) { int success; char buffer[BUFFER_SIZE]; char message[MESSAGE_SIZE]; // get message from socket and store into buffer //Ignoring possibliity that buffer > BUFFER_SIZE if (getMessage(socket, buffer, BUFFER_SIZE) > 0) { // place contents of the buffer into message structure ExMessage *msg = recastBuffer(buffer); // copy message body into string for processing int index; for (index = 0; index < msg->msgLength; index++) { message[index] = msg->msgBody[index]; } message[index] = '\0'; // process message success = processMessage(message); } return success; }
Bad · C
CVE IDTitleCVSSSeverityPublished
CVE-2023-44086 Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Tecnomatix Plant Simulation V2201 7.8 High2023-10-10
CVE-2023-44085 Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Tecnomatix Plant Simulation V2201 7.8 High2023-10-10
CVE-2023-44084 Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Tecnomatix Plant Simulation V2201 7.8 High2023-10-10
CVE-2023-39194 Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match() — Red Hat Enterprise Linux 8 3.2 Low2023-10-09
CVE-2023-39193 Kernel: netfilter: xtables sctp out-of-bounds read in match_flags() — Red Hat Enterprise Linux 8 6.1 Medium2023-10-09
CVE-2023-39192 Kernel: netfilter: xtables out-of-bounds read in u32_match_it() — Red Hat Enterprise Linux 8 6.7 Medium2023-10-09
CVE-2023-39189 Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one() — Red Hat Enterprise Linux 8 5.1 Medium2023-10-09
CVE-2023-42755 Kernel: rsvp: out-of-bounds read in rsvp_classify() — Red Hat Enterprise Linux 8 6.5 Medium2023-10-05
CVE-2023-5377 Out-of-bounds Read in gpac/gpac — gpac/gpac 7.1 -2023-10-04
CVE-2023-42822 Unchecked access to font glyph info in xrdp — xrdp 4.6 Medium2023-09-27
CVE-2023-4156 Heap out of bound read in builtin.c — gawk 4.4 Medium2023-09-25
CVE-2023-42821 github.com/gomarkdown/markdown Out-of-bounds Read while parsing citations — markdown 7.5 High2023-09-22
CVE-2023-37459 Out-of-bounds read when processing a received IPv6 packet — contiki-ng 5.3 Medium2023-09-15
CVE-2023-37281 Out-of-bounds read during IPHC address decompression — contiki-ng 5.3 Medium2023-09-15
CVE-2023-25584 Out of bounds read in parse_module function in bfd/vms-alpha.c — binutils 6.3 Medium2023-09-14
CVE-2023-36766 Microsoft Excel Information Disclosure Vulnerability — Microsoft Office 2019 7.8 High2023-09-12
CVE-2019-7819 Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat Reader 5.5 Medium2023-09-11
CVE-2022-34238 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat Reader 5.5 Medium2023-09-11
CVE-2022-28832 Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — InDesign Desktop 7.8 High2023-09-11
CVE-2021-44193 Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — After Effects 3.3 Low2023-09-07
CVE-2021-44195 Adobe After Effects JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — After Effects 3.3 Low2023-09-07
CVE-2021-44194 Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — After Effects 3.3 Low2023-09-07
CVE-2021-44192 Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — After Effects 3.3 Low2023-09-07
CVE-2021-44190 Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — After Effects 3.3 Low2023-09-07
CVE-2021-44191 Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — After Effects 3.3 Low2023-09-07
CVE-2021-42734 Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Photoshop Desktop 5.5 Medium2023-09-07
CVE-2021-40791 Adobe Premiere Pro JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Premiere Pro 5.5 Medium2023-09-07
CVE-2021-42265 Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Premiere Pro 5.5 Medium2023-09-07
CVE-2021-44188 Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — After Effects 7.8 High2023-09-07
CVE-2021-40795 Adobe Premiere Pro 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Premiere Pro 7.8 High2023-09-07

Vulnerabilities classified as CWE-125 (跨界内存读) represent 2965 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.