Weakness (CWE)
CWE-126: Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Source: MITRE CWE-126
283 results · Clear filters · Feed
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 6.8
Bluetooth: integer underflow in gatt_find_info_rsp
An malicious BLE device can crash BLE victim device by sending malformed gatt packet
-
Medium 5.3
Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because ther…
-
Medium 5.5
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
-
Medium 5.5
Buffer Over-read in Audio
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
-
Medium 5.1
Buffer Over-read in DSP Services
Information Disclosure while processing IOCTL request in FastRPC.
-
Medium 5.3
Heap-buffer over-read with WOLFSSL_CALLBACKS
In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).
-
Medium 5.9
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.0…
-
Medium 5.9
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.0…
-
Medium 4.6
Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
-
Medium 6.1
Buffer Over-read in Audio
Information disclosure in Audio while accessing AVCS services from ADSP payload.
-
Medium 5.5
Buffer Over-read in Audio
Transient DOS in Audio when invoking callback function of ASM driver.
-
Medium 4.0
Memory corruption issues is Cloudflare zlib implementation
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could e…
-
Medium 4.4
A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may …
-
Medium 4.4
A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a loca…
-
Medium 4.4
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a lo…
-
Medium 6.6
Buffer Over-read in WLAN HOST
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling command through WMI interfaces.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL when reception status handler is called.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling the WMI state info command.
-
Medium 6.1
Buffer Over-read in IOE Firmware
Information disclosure in IOE Firmware while handling WMI command.
-
Medium 6.1
Buffer Over-read in Qualcomm IPC
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
-
Medium 6.1
Buffer Over-read in WLAN Host
Information Disclosure in WLAN Host when processing WMI event command.
-
Medium 6.1
Buffer Over-read in WLAN HOST
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
-
Medium 5.3
DHCP Server Service Information Disclosure Vulnerability
DHCP Server Service Information Disclosure Vulnerability
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
-
Medium 5.3CVE-2023-38152 EPSS 24%
DHCP Server Service Information Disclosure Vulnerability
DHCP Server Service Information Disclosure Vulnerability
-
Medium 6.5
Buffer Over-read in Bluetooth HOST
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
-
Medium 6.7
Buffer over-read in Modem
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
-
Medium 5.1
Buffer over-read in Automotive multimedia
Information disclosure in Automotive multimedia due to buffer over-read.
-
Medium 5.9
Buffer Over-read in gpac/gpac
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.
-
Medium 5.3
Buffer Over-read in Wireshark
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
-
Medium 5.5
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
-
Medium 5.5
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
-
Medium 6.5
Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
-
Medium 6.5
Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
-
Medium 6.5
Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
-
Medium 6.5
Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
-
Medium 6.5
Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability