CWE-126 · Buffer Over-read (page 3)
Page 3 of 5 — CVEs classified under CWE-126, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45561 | High | 7.8 | 2025-02-03 | Memory corruption while handling IOCTL call from user-space to set latency level. |
CVE-2024-38417 | Medium | 6.1 | 2025-02-03 | Information disclosure while processing IO control commands. |
CVE-2024-38416 | Medium | 6.1 | 2025-02-03 | Information disclosure during audio playback. |
CVE-2024-38414 | Medium | 6.1 | 2025-02-03 | Information disclosure while processing information on firmware image during core initialization. |
CVE-2024-38404 | High | 7.5 | 2025-02-03 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem. |
CVE-2025-21277 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21271 | High | 7.8 | 2025-01-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2025-21176 | High | 8.8 | 2025-01-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-45559 | Medium | 5.5 | 2025-01-06 | Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend. |
CVE-2024-45558 | High | 7.5 | 2025-01-06 | Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
CVE-2024-45548 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call. |
CVE-2024-45546 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. |
CVE-2024-43063 | Medium | 6.1 | 2025-01-06 | information disclosure while invoking the mailbox read API. |
CVE-2024-33067 | Medium | 6.1 | 2025-01-06 | Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
CVE-2024-33061 | Medium | 6.8 | 2025-01-06 | Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. |
CVE-2024-23366 | Medium | 6.6 | 2025-01-06 | Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size. |
CVE-2024-49088 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-33056 | High | 8.4 | 2024-12-02 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
CVE-2024-33037 | Medium | 6.1 | 2024-12-02 | Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware. |
CVE-2024-42333 | Low | 2.7 | 2024-11-27 | The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c |
CVE-2018-5852 | High | 8.4 | 2024-11-26 | An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/i… |
CVE-2017-17772 | Critical | 9.8 | 2024-11-26 | In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation. |
CVE-2024-11596 | High | 7.8 | 2024-11-21 | ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file |
CVE-2024-49031 | High | 7.8 | 2024-11-12 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2024-9843 | Medium | 5.0 | 2024-11-12 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service. |
CVE-2024-38405 | High | 7.5 | 2024-11-04 | Transient DOS while processing the CU information from RNR IE. |
CVE-2024-38403 | High | 7.5 | 2024-11-04 | Transient DOS while parsing BTM ML IE when per STA profile is not included. |
CVE-2024-43595 | Medium | 6.5 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43500 | Medium | 5.5 | 2024-10-08 | Windows Resilient File System (ReFS) Information Disclosure Vulnerability |
CVE-2024-38265 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38261 | High | 7.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38397 | High | 7.5 | 2024-10-07 | Transient DOS while parsing probe response and assoc response frame. |
CVE-2024-33073 | High | 8.2 | 2024-10-07 | Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
CVE-2024-33071 | High | 7.5 | 2024-10-07 | Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. |
CVE-2024-33070 | High | 7.5 | 2024-10-07 | Transient DOS while parsing ESP IE from beacon/probe response frame. |
CVE-2024-33064 | High | 8.2 | 2024-10-07 | Information disclosure while parsing the multiple MBSSID IEs from the beacon. |
CVE-2024-33049 | High | 7.5 | 2024-10-07 | Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. |
CVE-2024-9029 | High | 7.5 | 2024-09-27 | A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Me… |
CVE-2024-43475 | High | 7.3 | 2024-09-10 | Microsoft Windows Admin Center Information Disclosure Vulnerability |
CVE-2024-38250 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-33057 | High | 7.5 | 2024-09-02 | Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
CVE-2024-33051 | High | 7.5 | 2024-09-02 | Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
CVE-2024-33050 | High | 7.5 | 2024-09-02 | Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
CVE-2024-33048 | High | 7.5 | 2024-09-02 | Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. |
CVE-2024-33047 | High | 8.4 | 2024-09-02 | Memory corruption when the captureRead QDCM command is invoked from user-space. |
CVE-2024-33043 | Medium | 5.5 | 2024-09-02 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. |
CVE-2024-23364 | High | 7.5 | 2024-09-02 | Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is recei… |
CVE-2024-23359 | High | 8.2 | 2024-09-02 | Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. |
CVE-2024-23358 | High | 7.5 | 2024-09-02 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem. |
CVE-2024-7347 | Medium | 4.7 | 2024-08-14 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in i… |
CVE-2024-38135 | High | 7.8 | 2024-08-13 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-38127 | High | 7.8 | 2024-08-13 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-33026 | High | 7.5 | 2024-08-05 | Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp. |
CVE-2024-33025 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
CVE-2024-33020 | High | 7.5 | 2024-08-05 | Transient DOS while processing TID-to-link mapping IE elements. |
CVE-2024-33019 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the received TID-to-link mapping action frame. |
CVE-2024-33018 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame. |
CVE-2024-33015 | High | 7.5 | 2024-08-05 | Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. |
CVE-2024-33014 | High | 7.5 | 2024-08-05 | Transient DOS while parsing ESP IE from beacon/probe response frame. |
CVE-2024-33013 | High | 7.5 | 2024-08-05 | Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length. |
CVE-2024-33012 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon. |
CVE-2024-33011 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero. |
CVE-2024-23353 | High | 7.5 | 2024-08-05 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
CVE-2024-21479 | High | 7.5 | 2024-08-05 | Transient DOS during music playback of ALAC content. |
CVE-2024-21467 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon probe frame during scan entry generation in client side. |
CVE-2024-21459 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon or probe response frame in STA. |
CVE-2024-38071 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-30079 | High | 7.8 | 2024-07-09 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2024-30071 | Medium | 4.7 | 2024-07-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-21465 | High | 7.8 | 2024-07-01 | Memory corruption while processing key blob passed by the user. |
CVE-2024-21462 | High | 7.1 | 2024-07-01 | Transient DOS while loading the TA ELF file. |
CVE-2024-21458 | Medium | 6.5 | 2024-07-01 | Information disclosure while handling SA query action frame. |
CVE-2024-21457 | Medium | 6.5 | 2024-07-01 | INformation disclosure while handling Multi-link IE in beacon frame. |
CVE-2024-21456 | Medium | 6.5 | 2024-07-01 | Information Disclosure while parsing beacon frame in STA. |
CVE-2024-38373 | Critical | 9.6 | 2024-06-24 | FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Respon… |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-23363 | High | 7.5 | 2024-06-03 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. |
CVE-2023-43555 | High | 8.2 | 2024-06-03 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
CVE-2023-43537 | Medium | 6.5 | 2024-06-03 | Information disclosure while handling T2LM Action Frame in WLAN Host. |
CVE-2024-30039 | Medium | 5.5 | 2024-05-14 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-21477 | High | 7.5 | 2024-05-06 | Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. |
CVE-2023-43528 | Medium | 6.1 | 2024-05-06 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
CVE-2023-43527 | Medium | 6.8 | 2024-05-06 | Information disclosure while parsing dts header atom in Video. |
CVE-2024-28902 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-28901 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-28900 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26255 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26243 | High | 7.0 | 2024-04-09 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-31082 | High | 7.3 | 2024-04-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length val… |
CVE-2024-31081 | High | 7.3 | 2024-04-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length valu… |
CVE-2024-31080 | High | 7.3 | 2024-04-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length valu… |
CVE-2023-33115 | High | 7.8 | 2024-04-01 | Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
CVE-2024-3077 | Medium | 6.8 | 2024-03-29 | An malicious BLE device can crash BLE victim device by sending malformed gatt packet |
CVE-2023-45919 | Medium | 5.3 | 2024-03-27 | Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which user… |
CVE-2024-26176 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26160 | Medium | 5.5 | 2024-03-12 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
CVE-2023-43539 | High | 7.5 | 2024-03-04 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
CVE-2023-33090 | Medium | 5.5 | 2024-03-04 | Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
CVE-2023-33078 | Medium | 5.1 | 2024-03-04 | Information Disclosure while processing IOCTL request in FastRPC. |
CVE-2023-51773 | Critical | 9.1 | 2024-02-29 | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c. |