Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-125 (跨界内存读) — Vulnerability Class 2872

2872 vulnerabilities classified as CWE-125 (跨界内存读). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-5204 Open Asset Import Library Assimp MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5203 Open Asset Import Library Assimp ParsingUtils.h SkipSpaces out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5202 Open Asset Import Library Assimp HL1MDLLoader.cpp validate_header out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5201 Open Asset Import Library Assimp LWOLoader.cpp CountVertsAndFacesLWO2 out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5200 Open Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5169 Open Asset Import Library Assimp MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5168 Open Asset Import Library Assimp MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5167 Open Asset Import Library Assimp LWOLoader.h GetS0 out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5166 Open Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2025-5165 Open Asset Import Library Assimp MDCLoader.cpp ValidateSurfaceHeader out-of-bounds — Assimp 3.3 Low2025-05-26
CVE-2022-31812 Siemens SiPass Integrated 缓冲区错误漏洞 — SiPass integrated 7.5 High2025-05-23
CVE-2023-53154 cJSON 缓冲区错误漏洞 — cJSON 2.9 Low2025-05-23
CVE-2025-46716 Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM) — Sandboxie 5.5 Medium2025-05-22
CVE-2025-20152 ISE restart — Cisco Identity Services Engine Software 8.6 High2025-05-21
CVE-2025-4969 Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c 6.5 Medium2025-05-21
CVE-2025-47757 Fuji Electric V-SFT 缓冲区错误漏洞 — V-SFT 7.8 High2025-05-19
CVE-2025-47756 Fuji Electric V-SFT 缓冲区错误漏洞 — V-SFT 7.8 High2025-05-19
CVE-2025-47755 Fuji Electric V-SFT 缓冲区错误漏洞 — V-SFT 7.8 High2025-05-19
CVE-2025-47754 Fuji Electric V-SFT 缓冲区错误漏洞 — V-SFT 7.8 High2025-05-19
CVE-2025-47753 Fuji Electric V-SFT 缓冲区错误漏洞 — V-SFT 7.8 High2025-05-19
CVE-2025-48188 GNU PSPP 安全漏洞 — PSPP 2.9 Low2025-05-16
CVE-2025-30420 Out of Bounds Read in Bitmap::InternalDraw() in NI Circuit Design Suite — Circuit Design Suite 7.8 High2025-05-15
CVE-2025-30419 Out of Bounds Read in GetSymbolBorderRectSize() in NI Circuit Design Suite — Circuit Design Suite 7.8 High2025-05-15
CVE-2025-43551 Substance3D - Stager | Out-of-bounds Read (CWE-125) — Substance3D - Stager 5.5 Medium2025-05-13
CVE-2025-32707 NTFS Elevation of Privilege Vulnerability — Windows 10 Version 1507 7.8 High2025-05-13
CVE-2025-32705 Microsoft Outlook Remote Code Execution Vulnerability — Microsoft 365 Apps for Enterprise 7.8 High2025-05-13
CVE-2025-29961 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability — Windows 10 Version 1507 6.5 Medium2025-05-13
CVE-2025-29839 Windows Multiple UNC Provider Driver Information Disclosure Vulnerability — Windows 10 Version 1507 4.0 Medium2025-05-13
CVE-2025-29836 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability — Windows 10 Version 1507 6.5 Medium2025-05-13
CVE-2025-29835 Windows Remote Access Connection Manager Information Disclosure Vulnerability — Windows 10 Version 1507 6.5 Medium2025-05-13

Vulnerabilities classified as CWE-125 (跨界内存读) represent 2872 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.