CWE-126 · Buffer Over-read (page 4)
Page 4 of 5 — CVEs classified under CWE-126, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6936 | Medium | 5.3 | 2024-02-20 | In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a bu… |
CVE-2023-39541 | Medium | 5.9 | 2024-02-20 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet… |
CVE-2023-39540 | Medium | 5.9 | 2024-02-20 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet… |
CVE-2024-21340 | Medium | 4.6 | 2024-02-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-20290 | High | 7.5 | 2024-02-07 | A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff… |
CVE-2023-43536 | High | 7.5 | 2024-02-06 | Transient DOS while parse fils IE with length equal to 1. |
CVE-2023-43533 | High | 7.5 | 2024-02-06 | Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
CVE-2023-33065 | Medium | 6.1 | 2024-02-06 | Information disclosure in Audio while accessing AVCS services from ADSP payload. |
CVE-2023-33064 | Medium | 5.5 | 2024-02-06 | Transient DOS in Audio when invoking callback function of ASM driver. |
CVE-2023-33060 | High | 7.1 | 2024-02-06 | Transient DOS in Core when DDR memory check is called while DDR is not initialized. |
CVE-2023-33058 | High | 8.2 | 2024-02-06 | Information disclosure in Modem while processing SIB5. |
CVE-2023-6992 | Medium | 4.0 | 2024-01-04 | Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The iss… |
CVE-2023-43512 | High | 7.5 | 2024-01-02 | Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the… |
CVE-2023-33116 | High | 7.5 | 2024-01-02 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
CVE-2023-33112 | High | 7.5 | 2024-01-02 | Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
CVE-2023-33062 | High | 7.5 | 2024-01-02 | Transient DOS in WLAN Firmware while parsing a BTM request. |
CVE-2023-33040 | High | 7.5 | 2024-01-02 | Transient DOS in Data Modem during DTLS handshake. |
CVE-2023-35643 | High | 7.5 | 2023-12-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-35638 | High | 7.5 | 2023-12-12 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-33098 | High | 7.5 | 2023-12-05 | Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
CVE-2023-33097 | High | 7.5 | 2023-12-05 | Transient DOS in WLAN Firmware while processing a FTMR frame. |
CVE-2023-33081 | High | 7.5 | 2023-12-05 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
CVE-2023-33080 | High | 7.5 | 2023-12-05 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
CVE-2023-49285 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack agai… |
CVE-2023-36397 | Critical | 9.8 | 2023-11-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-36392 | High | 7.5 | 2023-11-14 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-43574 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated pri… |
CVE-2023-43572 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to d… |
CVE-2023-43568 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to… |
CVE-2023-33061 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
CVE-2023-33048 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
CVE-2023-33047 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
CVE-2023-28572 | Medium | 6.6 | 2023-11-07 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. |
CVE-2023-28569 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28568 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL when reception status handler is called. |
CVE-2023-28566 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling the WMI state info command. |
CVE-2023-28563 | Medium | 6.1 | 2023-11-07 | Information disclosure in IOE Firmware while handling WMI command. |
CVE-2023-28554 | Medium | 6.1 | 2023-11-07 | Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. |
CVE-2023-28553 | Medium | 6.1 | 2023-11-07 | Information Disclosure in WLAN Host when processing WMI event command. |
CVE-2023-36581 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-33027 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing rsn ies. |
CVE-2023-33026 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing a NAN management frame. |
CVE-2023-28571 | Medium | 6.1 | 2023-10-03 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
CVE-2023-24849 | High | 8.2 | 2023-10-03 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
CVE-2023-24848 | High | 8.2 | 2023-10-03 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
CVE-2023-22385 | High | 8.2 | 2023-10-03 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
CVE-2023-38152 | Medium | 5.3 | 2023-09-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-38144 | High | 7.8 | 2023-09-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36803 | Medium | 5.5 | 2023-09-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36801 | Medium | 5.3 | 2023-09-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-36773 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-33016 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN firmware while parsing MLO (multi-link operation). |
CVE-2023-33015 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. |
CVE-2023-21667 | Medium | 6.5 | 2023-09-05 | Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
CVE-2022-40524 | Medium | 6.7 | 2023-09-05 | Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
CVE-2022-33220 | Medium | 5.1 | 2023-09-05 | Information disclosure in Automotive multimedia due to buffer over-read. |
CVE-2023-4758 | Medium | 5.5 | 2023-09-04 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-38172 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36904 | High | 7.8 | 2023-08-08 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-28555 | High | 7.5 | 2023-08-08 | Transient DOS in Audio while remapping channel buffer in media codec decoding. |
CVE-2023-21625 | High | 8.2 | 2023-08-08 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response. |
CVE-2023-3649 | Medium | 5.3 | 2023-07-14 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
CVE-2023-35330 | High | 7.5 | 2023-07-11 | Windows Extended Negotiation Denial of Service Vulnerability |
CVE-2023-35324 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-33173 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33172 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33169 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33168 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33167 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33166 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32085 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-23571 | High | 7.5 | 2023-07-06 | An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of… |
CVE-2023-28542 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while fetching TX status information. |
CVE-2023-28541 | High | 7.8 | 2023-07-04 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
CVE-2023-21669 | High | 8.2 | 2023-06-06 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. |
CVE-2023-21661 | High | 7.5 | 2023-06-06 | Transient DOS while parsing WLAN beacon or probe-response frame. |
CVE-2023-21660 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while parsing FT Information Elements. |
CVE-2023-21659 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
CVE-2023-21658 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
CVE-2023-24942 | High | 7.5 | 2023-05-09 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-24901 | High | 7.5 | 2023-05-09 | Windows NFS Portmapper Information Disclosure Vulnerability |
CVE-2022-33273 | High | 7.3 | 2023-05-02 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
CVE-2022-40505 | High | 8.2 | 2023-05-02 | Information disclosure due to buffer over-read in Modem while parsing DNS hostname. |
CVE-2022-40503 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
CVE-2022-33297 | Medium | 6.8 | 2023-04-13 | Information disclosure due to buffer overread in Linux sensors |
CVE-2022-33295 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length. |
CVE-2022-33291 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. |
CVE-2022-33287 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. |
CVE-2022-33258 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read in modem while reading configuration parameters. |
CVE-2022-33228 | High | 8.2 | 2023-04-13 | Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. |
CVE-2022-33222 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read while parsing DNS response packets in Modem. |
CVE-2022-25747 | High | 8.2 | 2023-04-13 | Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message |
CVE-2022-25730 | High | 8.2 | 2023-04-13 | Information disclosure in modem due to improper check of IP type while processing DNS server query |
CVE-2022-25726 | High | 8.2 | 2023-04-13 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet |
CVE-2023-24513 | Medium | 6.5 | 2023-04-12 | On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malf… |
CVE-2023-28267 | Medium | 6.5 | 2023-04-11 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2023-28266 | Medium | 5.5 | 2023-04-11 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2023-24883 | Medium | 6.5 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-20112 | High | 7.4 | 2023-03-23 | A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affect… |
CVE-2023-24870 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |