Weakness (CWE)
CWE-126: Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Source: MITRE CWE-126
283 results · Clear filters · Feed
-
Medium 5.4
Windows SMB Information Disclosure Vulnerability
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
-
Medium 5.9
PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions …
-
Medium 6.7
Buffer Over-read in Camera Driver
Memory corruption due to improper bounds check while command handling in camera-kernel driver.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
-
Medium 6.5
Libsoup: heap buffer overflow in sniff_unknown()
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Buffer Over-read in Hypervisor
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
-
Medium 4.0
libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c …
-
Medium 6.1
Buffer Over-read in Automotive Multimedia
Information disclosure while processing IO control commands.
-
Medium 6.1
Buffer Over-read in Audio
Information disclosure during audio playback.
-
Medium 6.1
Buffer Over-read in Computer Vision
Information disclosure while processing information on firmware image during core initialization.
-
Medium 5.5
Buffer Over-read in Automotive OS Platform
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
-
Medium 6.1
Buffer Over-read in Automotive Autonomy
information disclosure while invoking the mailbox read API.
-
Medium 6.1
Buffer Over-read in Audio
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
-
Medium 6.8
Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
-
Medium 6.6
Buffer Over-read in Automotive Autonomy
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
-
Medium 6.1
Buffer Over-read in Neural Processing Unit
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
-
Medium 5.0
A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a deni…
-
Medium 6.5
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
-
Medium 5.5
Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function
The `heap-buffer-overflow` is triggered in the `strlen()` function when handling the `c_chars_to_str` function in the dbn crate. This vulnerability occurs because the `CStr::from_ptr()` function in Rust assumes that the provided C string is null-terminated. H…
-
Medium 5.5
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
-
Medium 5.5
Buffer Over-read in FM Host
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
-
Medium 4.7
NGINX MP4 module vulnerability
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with…
-
Medium 6.5
Buffer Over-read in WLAN Host Communication
Information disclosure while handling beacon probe frame during scan entry generation in client side.
-
Medium 6.5
Buffer Over-read in WLAN HOST
Information disclosure while handling beacon or probe response frame in STA.
-
Medium 4.7
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 6.5
Buffer Over-read in WLAN HOST
Information disclosure while handling SA query action frame.
-
Medium 6.5
Buffer Over-read in WLAN Host Communication
INformation disclosure while handling Multi-link IE in beacon frame.
-
Medium 6.5
Buffer Over-read in WLAN HOST
Information Disclosure while parsing beacon frame in STA.
-
Medium 4.7
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 6.5
Buffer Over-read in WLAN Host
Information disclosure while handling T2LM Action Frame in WLAN Host.
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 6.1
Buffer Over-read in Audio
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
-
Medium 6.8
Buffer Over-read in Video
Information disclosure while parsing dts header atom in Video.
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability