Cyber Resilience

CWE · MITRE source

CWE-125Out-of-bounds Read

Abstraction: Base · CVEs in our corpus: 9,364

The product reads data past the end, or before the beginning, of the intended buffer.

Last updated: 22 August 2026 00:25 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • ID.RA-01
  • PR.PS-02
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2020-8794 9.99.80.88902020-02-25
CVE-2026-3055 KEV 9.99.80.84472026-03-23
CVE-2020-25107 9.49.80.52262020-12-11
CVE-2020-25109 9.49.80.52262020-12-11
CVE-2020-25110 9.49.80.52262020-12-11
CVE-2019-6443 9.39.10.66882019-01-16
CVE-2016-1646 KEV 9.28.80.48112016-03-29
CVE-2017-5030 KEV 9.28.80.41602017-04-24
CVE-2019-8457 9.29.80.45432019-05-30
CVE-2024-0519 KEV 9.28.80.03802024-01-16
CVE-2025-5419 KEV 9.28.80.07632025-06-03
CVE-2026-11645 KEV 9.28.80.02192026-06-09
CVE-2019-19307 9.19.80.41622019-11-26
CVE-2021-44142 9.18.80.73862022-02-21
CVE-2024-26594 8.99.10.51252024-02-23
CVE-2019-6444 8.89.10.45722019-01-16
CVE-2023-49285 8.88.60.88822023-12-04
CVE-2021-25216 8.78.10.82372021-04-29
CVE-2024-29943 8.69.80.22932024-03-22
CVE-2014-0160 KEV 8.57.51.00002014-04-07
CVE-2016-4523 KEV 8.57.50.31392016-06-09
CVE-2021-20093 8.59.10.33302021-06-16
CVE-2021-4034 KEV 8.57.80.94922022-01-28
CVE-2023-36424 KEV 8.57.80.12182023-11-14
CVE-2025-5777 KEV 8.57.50.99962025-06-17