Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-125
Common Weakness Enumeration

CWE-125: Out-of-bounds Read

ShareXLinkedInRedditHN

The product reads past the beginning or end of a buffer, leaking data or crashing.

Abstraction
Base
OWASP Top 10
A06:2021 (#6)
Exploit Likelihood
High
Related CVEs
80

How to mitigate

Bounds-check every index and pointer computation; fuzz parsers with sanitizers enabled.

▪ References & documentation

https://cwe.mitre.org/data/definitions/125.htmlNVD CWE listing

▪ Related CVEs

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2022-28739High

Security vulnerability in ruby

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2018-25033High

Security vulnerability in admesh

CVE-2018-8139High

Security vulnerability in ChakraCore

CVE-2023-29419Medium

Security vulnerability in bzip3

CVE-2023-29418Medium

Security vulnerability in bzip3

CVE-2018-6969High

Security vulnerability in tools

CVE-2026-57235High

Security vulnerability in nokogiri

CVE-2026-28386High

Security vulnerability in openssl

CVE-2014-0160High

Security vulnerability in openssl

CVE-2026-9076High

Security vulnerability in openssl

CVE-2021-3712High

Security vulnerability in openssl

CVE-2026-34180High

Security vulnerability in openssl

CVE-2018-1000122Critical

Security vulnerability in curl

CVE-2018-1000301Critical

Security vulnerability in curl

CVE-2018-16842Medium

Security vulnerability in curl

CVE-2022-35260Medium

Security vulnerability in curl

CVE-2016-8621Medium

Security vulnerability in curl

CVE-2017-8817Critical

Security vulnerability in curl

CVE-2025-9086High

Security vulnerability in curl

CVE-2026-28386High

Security vulnerability in openssl

CVE-2014-0160High

Security vulnerability in openssl

CVE-2021-3712High

Security vulnerability in openssl

CVE-2026-34180High

Security vulnerability in openssl

CVE-2026-9076High

Security vulnerability in openssl

CVE-2020-9558Low

Security vulnerability in bridge

CVE-2020-9675High

Security vulnerability in bridge

CVE-2024-20771Medium

Security vulnerability in bridge

CVE-2024-34140Medium

Security vulnerability in bridge

CVE-2023-38217Medium

Security vulnerability in bridge

CVE-2021-42720High

Security vulnerability in bridge

CVE-2021-44186Low

Security vulnerability in bridge

CVE-2021-44187Low

Security vulnerability in bridge

CVE-2021-45052Low

Security vulnerability in bridge

CVE-2021-36074Low

Security vulnerability in bridge

CVE-2021-36079High

Security vulnerability in bridge

CVE-2021-21091Low

Security vulnerability in bridge

CVE-2021-35992Low

Security vulnerability in bridge

CVE-2021-36071Low

Security vulnerability in bridge

CVE-2024-20757Medium

Security vulnerability in bridge

CVE-2022-35705High

Security vulnerability in bridge

CVE-2023-22231Medium

Security vulnerability in bridge

CVE-2022-28850Medium

Security vulnerability in bridge

CVE-2026-75656Medium

Security vulnerability in bridge

CVE-2021-42719High

Security vulnerability in bridge

CVE-2021-42722High

Security vulnerability in bridge

CVE-2021-44185Low

Security vulnerability in bridge

CVE-2020-9553Low

Security vulnerability in bridge

CVE-2020-9557Medium

Security vulnerability in bridge

CVE-2022-35702High

Security vulnerability in bridge

CVE-2022-35703High

Security vulnerability in bridge

CVE-2022-35707High

Security vulnerability in bridge

CVE-2023-21583Medium

Security vulnerability in bridge

CVE-2024-39387Medium

Security vulnerability in bridge

CVE-2024-45147Medium

Security vulnerability in bridge

CVE-2019-7152Medium

Security vulnerability in binaryen

CVE-2019-7700Medium

Security vulnerability in binaryen

CVE-2019-7701Medium

Security vulnerability in binaryen

CVE-2026-57235High

Security vulnerability in nokogiri

GHSA-62p4-gmf7-7g93Critical

Security vulnerability in pillow

GHSA-fj7v-r99m-22gqMedium

Security vulnerability in pillow

CVE-2011-2501Medium

Security vulnerability in LibPng

CVE-2025-64720High

Security vulnerability in LibPng

CVE-2026-22801Medium

Security vulnerability in LibPng

CVE-2025-64505Medium

Security vulnerability in LibPng

CVE-2026-22695Medium

Security vulnerability in LibPng

CVE-2026-33636High

Security vulnerability in LibPng

CVE-2025-64506Medium

Security vulnerability in LibPng

CVE-2025-66293High

Security vulnerability in LibPng

CVE-2021-42387High

Security vulnerability in clickhouse

CVE-2019-16535Critical

Security vulnerability in clickhouse

CVE-2021-42388High

Security vulnerability in clickhouse