Weakness (CWE)
CWE-126: Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Source: MITRE CWE-126
606 results · Feed
-
High 7.8
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure when Video engine escape input data is less than expected minimum size.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while running video usecase having rogue firmware.
-
Medium 6.1
Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
-
Medium 4.8
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, …
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
High 8.8
EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using b…
-
Medium 6.8
Microsoft Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
High 7.8
Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
-
Medium 6.1
Buffer Over-read in Automotive OS Platform Android
Information disclosure while opening a fastrpc session when domain is not sanitized.
-
Medium 4.5
`openssl` `X509VerifyParamRef::set_host` buffer over-read
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
-
Medium 5.8
Modbus TCP buffer overread
Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2.
-
Medium 5.5
Windows Storage Port Driver Information Disclosure Vulnerability
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
-
High 7.8
Buffer Over-read in Camera
Memory corruption during the image encoding process.
-
High 7.5
Buffer Over-read in WLAN Embedded SW
Transient DOS while processing received beacon frame.
-
High 7.5
Buffer Over-read in WLAN Embedded SW
Transient DOS may occur while processing malformed length field in SSID IEs.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
-
High 8.2
Buffer Over-read in Data HLOS - LNX
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
-
Medium 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
-
Low 3.4
A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 t…
-
High 7.5
An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, ker…
-
High 7.5
An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, ker…