CWE-126 · Buffer Over-read (page 2)
Page 2 of 5 — CVEs classified under CWE-126, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-62462 | High | 7.8 | 2025-12-09 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-62461 | High | 7.8 | 2025-12-09 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-12106 | Critical | 9.1 | 2025-12-01 | Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses |
CVE-2025-63602 | High | 7.3 | 2025-11-18 | A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) as an unprivileged u… |
CVE-2025-60720 | High | 7.8 | 2025-11-11 | Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. |
CVE-2025-12745 | Medium | 5.3 | 2025-11-05 | A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c… |
CVE-2025-47368 | High | 7.8 | 2025-11-04 | Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. |
CVE-2025-47362 | Medium | 6.1 | 2025-11-04 | Information disclosure while processing message from client with invalid payload. |
CVE-2025-27064 | Medium | 6.1 | 2025-11-04 | Information disclosure while registering commands from clients with diag through diagHal. |
CVE-2025-62792 | High | 7.5 | 2025-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in w_expression_match(… |
CVE-2025-62787 | High | 7.5 | 2025-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt() when… |
CVE-2025-60729 | Medium | 5.3 | 2025-10-24 | PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function |
CVE-2025-55093 | Medium | 5.3 | 2025-10-17 | In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receiv… |
CVE-2025-55092 | Medium | 5.3 | 2025-10-17 | In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx… |
CVE-2025-55091 | Medium | 6.5 | 2025-10-16 | In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive(… |
CVE-2025-55090 | Medium | 6.5 | 2025-10-16 | In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receiv… |
CVE-2025-55084 | Medium | 5.3 | 2025-10-16 | In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_v… |
CVE-2025-55083 | Medium | 5.3 | 2025-10-15 | In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read. |
CVE-2025-55081 | Critical | 9.1 | 2025-10-15 | In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certai… |
CVE-2025-59192 | High | 7.8 | 2025-10-14 | Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-55325 | Medium | 5.5 | 2025-10-14 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-11617 | Medium | 5.4 | 2025-10-10 | A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect pay… |
CVE-2025-11616 | Medium | 5.4 | 2025-10-10 | A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain mess… |
CVE-2025-27049 | Medium | 5.5 | 2025-10-09 | Transient DOS while processing IOCTL call for image encoding. |
CVE-2025-27045 | Medium | 6.1 | 2025-10-09 | Information disclosure while processing batch command execution in Video driver. |
CVE-2025-27041 | Medium | 5.5 | 2025-10-09 | Transient DOS while processing video packets received from video firmware. |
CVE-2025-59933 | High | 7.8 | 2025-09-29 | libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input… |
CVE-2025-47328 | High | 7.5 | 2025-09-24 | Transient DOS while processing power control requests with invalid antenna or stream values. |
CVE-2025-47326 | High | 7.5 | 2025-09-24 | Transient DOS while handling command data during power control processing. |
CVE-2025-47318 | High | 7.5 | 2025-09-24 | Transient DOS while parsing the EPTM test control message to get the test pattern. |
CVE-2025-47317 | High | 7.8 | 2025-09-24 | Memory corruption due to global buffer overflow when a test command uses an invalid payload type. |
CVE-2025-27036 | Medium | 6.1 | 2025-09-24 | Information disclosure when Video engine escape input data is less than expected minimum size. |
CVE-2025-27033 | Medium | 6.1 | 2025-09-24 | Information disclosure while running video usecase having rogue firmware. |
CVE-2025-27030 | Medium | 6.1 | 2025-09-24 | information disclosure while invoking calibration data from user space to update firmware size. |
CVE-2025-21488 | High | 8.2 | 2025-09-24 | Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set. |
CVE-2025-21487 | High | 8.2 | 2025-09-24 | Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. |
CVE-2025-21484 | High | 8.2 | 2025-09-24 | Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. |
CVE-2025-4582 | High | 7.1 | 2025-09-23 | Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.This issue affects Con… |
CVE-2025-54901 | Medium | 5.5 | 2025-09-09 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2025-53806 | Medium | 6.5 | 2025-09-09 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-53798 | Medium | 6.5 | 2025-09-09 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-53797 | Medium | 6.5 | 2025-09-09 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-53796 | Medium | 6.5 | 2025-09-09 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-36855 | High | 8.8 | 2025-09-08 | A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://c… |
CVE-2025-53736 | Medium | 6.8 | 2025-08-12 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2025-27068 | High | 7.8 | 2025-08-06 | Memory corruption while processing an IOCTL command with an arbitrary address. |
CVE-2025-27065 | High | 7.5 | 2025-08-06 | Transient DOS while processing a frame with malformed shared-key descriptor. |
CVE-2025-21457 | Medium | 6.1 | 2025-08-06 | Information disclosure while opening a fastrpc session when domain is not sanitized. |
CVE-2023-53159 | Medium | 4.5 | 2025-07-28 | The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host. |
CVE-2025-7745 | Medium | 5.8 | 2025-07-24 | Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2. |
CVE-2025-49684 | Medium | 5.5 | 2025-07-08 | Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally. |
CVE-2025-49659 | High | 7.8 | 2025-07-08 | Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. |
CVE-2025-47973 | High | 7.8 | 2025-07-08 | Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-47971 | High | 7.8 | 2025-07-08 | Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-27057 | High | 7.5 | 2025-07-08 | Transient DOS while handling beacon frames with invalid IE header length. |
CVE-2025-27055 | High | 7.8 | 2025-07-08 | Memory corruption during the image encoding process. |
CVE-2025-21454 | High | 7.5 | 2025-07-08 | Transient DOS while processing received beacon frame. |
CVE-2025-21449 | High | 7.5 | 2025-07-08 | Transient DOS may occur while processing malformed length field in SSID IEs. |
CVE-2025-21446 | High | 7.5 | 2025-07-08 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
CVE-2025-21427 | High | 8.2 | 2025-07-08 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
CVE-2025-24068 | Medium | 5.5 | 2025-06-10 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
CVE-2025-27029 | High | 7.5 | 2025-06-03 | Transient DOS while processing the tone measurement response buffer when the response buffer is out of range. |
CVE-2025-21463 | High | 7.5 | 2025-06-03 | Transient DOS while processing the EHT operation IE in the received beacon frame. |
CVE-2024-53026 | High | 8.2 | 2025-06-03 | Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. |
CVE-2024-53021 | High | 8.2 | 2025-06-03 | Information disclosure may occur while processing goodbye RTCP packet from network. |
CVE-2024-53020 | High | 8.2 | 2025-06-03 | Information disclosure may occur while decoding the RTP packet with invalid header extension from network. |
CVE-2024-53019 | High | 8.2 | 2025-06-03 | Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. |
CVE-2025-47295 | Low | 3.7 | 2025-05-28 | A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthe… |
CVE-2024-52879 | High | 7.5 | 2025-05-15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel… |
CVE-2024-52878 | High | 7.5 | 2025-05-15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel… |
CVE-2024-52877 | High | 7.5 | 2025-05-15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel… |
CVE-2025-32704 | High | 8.4 | 2025-05-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29956 | Medium | 5.4 | 2025-05-13 | Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network. |
CVE-2025-4207 | Medium | 5.9 | 2025-05-08 | Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte… |
CVE-2025-21475 | High | 7.8 | 2025-05-06 | Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. |
CVE-2025-21459 | High | 7.5 | 2025-05-06 | Transient DOS while parsing per STA profile in ML IE. |
CVE-2024-49847 | High | 7.5 | 2025-05-06 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. |
CVE-2024-49846 | High | 8.2 | 2025-05-06 | Memory corruption while decoding of OTA messages from T3448 IE. |
CVE-2024-45568 | Medium | 6.7 | 2025-05-06 | Memory corruption due to improper bounds check while command handling in camera-kernel driver. |
CVE-2025-26676 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26672 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26664 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-21203 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-21448 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing SSID in action frames. |
CVE-2025-21435 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing extended IE in beacon. |
CVE-2025-21434 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing EHT operation IE or EHT capability IE. |
CVE-2025-21430 | High | 7.5 | 2025-04-07 | Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
CVE-2025-21429 | High | 7.5 | 2025-04-07 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. |
CVE-2025-21428 | High | 7.5 | 2025-04-07 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. |
CVE-2025-21421 | High | 7.8 | 2025-04-07 | Memory corruption while processing escape code in API. |
CVE-2024-45552 | High | 8.2 | 2025-04-07 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. |
CVE-2025-32053 | Medium | 6.5 | 2025-04-03 | A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read. |
CVE-2025-32052 | Medium | 6.5 | 2025-04-03 | A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. |
CVE-2025-24992 | Medium | 5.5 | 2025-03-11 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally. |
CVE-2024-12975 | | 2025-03-07 | A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface. | |
CVE-2024-43056 | Medium | 5.5 | 2025-03-03 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
CVE-2024-57970 | Medium | 4.0 | 2025-02-16 | libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles… |
CVE-2024-12011 | High | 7.6 | 2025-02-13 | A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by… |
CVE-2024-49839 | High | 8.2 | 2025-02-03 | Memory corruption during management frame processing due to mismatch in T2LM info element. |
CVE-2024-49838 | High | 8.2 | 2025-02-03 | Information disclosure while parsing the OCI IE with invalid length. |