CWE-126 · Buffer Over-read (page 4)
Page 4 of 6 — CVEs classified under CWE-126, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33012 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon. |
CVE-2024-33011 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero. |
CVE-2024-23353 | High | 7.5 | 2024-08-05 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
CVE-2024-21479 | High | 7.5 | 2024-08-05 | Transient DOS during music playback of ALAC content. |
CVE-2024-21467 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon probe frame during scan entry generation in client side. |
CVE-2024-21459 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon or probe response frame in STA. |
CVE-2024-38071 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-30079 | High | 7.8 | 2024-07-09 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2024-30071 | Medium | 4.7 | 2024-07-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-21465 | High | 7.8 | 2024-07-01 | Memory corruption while processing key blob passed by the user. |
CVE-2024-21462 | High | 7.1 | 2024-07-01 | Transient DOS while loading the TA ELF file. |
CVE-2024-21458 | Medium | 6.5 | 2024-07-01 | Information disclosure while handling SA query action frame. |
CVE-2024-21457 | Medium | 6.5 | 2024-07-01 | INformation disclosure while handling Multi-link IE in beacon frame. |
CVE-2024-21456 | Medium | 6.5 | 2024-07-01 | Information Disclosure while parsing beacon frame in STA. |
CVE-2024-38373 | Critical | 9.6 | 2024-06-24 | FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Respon… |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-23363 | High | 7.5 | 2024-06-03 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. |
CVE-2023-43555 | High | 8.2 | 2024-06-03 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
CVE-2023-43537 | Medium | 6.5 | 2024-06-03 | Information disclosure while handling T2LM Action Frame in WLAN Host. |
CVE-2024-30039 | Medium | 5.5 | 2024-05-14 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-21477 | High | 7.5 | 2024-05-06 | Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. |
CVE-2023-43528 | Medium | 6.1 | 2024-05-06 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
CVE-2023-43527 | Medium | 6.8 | 2024-05-06 | Information disclosure while parsing dts header atom in Video. |
CVE-2024-28902 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-28901 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-28900 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26255 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26243 | High | 7.0 | 2024-04-09 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-31082 | High | 7.3 | 2024-04-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length val… |
CVE-2024-31081 | High | 7.3 | 2024-04-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length valu… |
CVE-2024-31080 | High | 7.3 | 2024-04-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length valu… |
CVE-2023-33115 | High | 7.8 | 2024-04-01 | Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
CVE-2024-3077 | Medium | 6.8 | 2024-03-29 | An malicious BLE device can crash BLE victim device by sending malformed gatt packet |
CVE-2023-45919 | Medium | 5.3 | 2024-03-27 | Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which user… |
CVE-2024-26176 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26160 | Medium | 5.5 | 2024-03-12 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
CVE-2023-43539 | High | 7.5 | 2024-03-04 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
CVE-2023-33090 | Medium | 5.5 | 2024-03-04 | Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
CVE-2023-33078 | Medium | 5.1 | 2024-03-04 | Information Disclosure while processing IOCTL request in FastRPC. |
CVE-2023-51773 | Critical | 9.1 | 2024-02-29 | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c. |
CVE-2023-6936 | Medium | 5.3 | 2024-02-20 | In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a bu… |
CVE-2023-39541 | Medium | 5.9 | 2024-02-20 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet… |
CVE-2023-39540 | Medium | 5.9 | 2024-02-20 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet… |
CVE-2024-21340 | Medium | 4.6 | 2024-02-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-20290 | High | 7.5 | 2024-02-07 | A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff… |
CVE-2023-43536 | High | 7.5 | 2024-02-06 | Transient DOS while parse fils IE with length equal to 1. |
CVE-2023-43533 | High | 7.5 | 2024-02-06 | Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
CVE-2023-33065 | Medium | 6.1 | 2024-02-06 | Information disclosure in Audio while accessing AVCS services from ADSP payload. |
CVE-2023-33064 | Medium | 5.5 | 2024-02-06 | Transient DOS in Audio when invoking callback function of ASM driver. |
CVE-2023-33060 | High | 7.1 | 2024-02-06 | Transient DOS in Core when DDR memory check is called while DDR is not initialized. |
CVE-2023-33058 | High | 8.2 | 2024-02-06 | Information disclosure in Modem while processing SIB5. |
CVE-2023-6992 | Medium | 4.0 | 2024-01-04 | Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The iss… |
CVE-2023-43512 | High | 7.5 | 2024-01-02 | Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the… |
CVE-2023-33116 | High | 7.5 | 2024-01-02 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
CVE-2023-33112 | High | 7.5 | 2024-01-02 | Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
CVE-2023-33062 | High | 7.5 | 2024-01-02 | Transient DOS in WLAN Firmware while parsing a BTM request. |
CVE-2023-33040 | High | 7.5 | 2024-01-02 | Transient DOS in Data Modem during DTLS handshake. |
CVE-2023-35643 | High | 7.5 | 2023-12-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-35638 | High | 7.5 | 2023-12-12 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-33098 | High | 7.5 | 2023-12-05 | Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
CVE-2023-33097 | High | 7.5 | 2023-12-05 | Transient DOS in WLAN Firmware while processing a FTMR frame. |
CVE-2023-33081 | High | 7.5 | 2023-12-05 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
CVE-2023-33080 | High | 7.5 | 2023-12-05 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
CVE-2023-49285 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack agai… |
CVE-2023-36397 | Critical | 9.8 | 2023-11-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-36392 | High | 7.5 | 2023-11-14 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-43574 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated pri… |
CVE-2023-43572 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to d… |
CVE-2023-43568 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to… |
CVE-2023-33061 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
CVE-2023-33048 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
CVE-2023-33047 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
CVE-2023-28572 | Medium | 6.6 | 2023-11-07 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. |
CVE-2023-28569 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28568 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL when reception status handler is called. |
CVE-2023-28566 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling the WMI state info command. |
CVE-2023-28563 | Medium | 6.1 | 2023-11-07 | Information disclosure in IOE Firmware while handling WMI command. |
CVE-2023-28554 | Medium | 6.1 | 2023-11-07 | Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. |
CVE-2023-28553 | Medium | 6.1 | 2023-11-07 | Information Disclosure in WLAN Host when processing WMI event command. |
CVE-2023-36581 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-33027 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing rsn ies. |
CVE-2023-33026 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing a NAN management frame. |
CVE-2023-28571 | Medium | 6.1 | 2023-10-03 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
CVE-2023-24849 | High | 8.2 | 2023-10-03 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
CVE-2023-24848 | High | 8.2 | 2023-10-03 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
CVE-2023-22385 | High | 8.2 | 2023-10-03 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
CVE-2023-38152 | Medium | 5.3 | 2023-09-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-38144 | High | 7.8 | 2023-09-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36803 | Medium | 5.5 | 2023-09-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36801 | Medium | 5.3 | 2023-09-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-36773 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-33016 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN firmware while parsing MLO (multi-link operation). |
CVE-2023-33015 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. |
CVE-2023-21667 | Medium | 6.5 | 2023-09-05 | Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
CVE-2022-40524 | Medium | 6.7 | 2023-09-05 | Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
CVE-2022-33220 | Medium | 5.1 | 2023-09-05 | Information disclosure in Automotive multimedia due to buffer over-read. |
CVE-2023-4758 | Medium | 5.5 | 2023-09-04 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-38172 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36904 | High | 7.8 | 2023-08-08 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-28555 | High | 7.5 | 2023-08-08 | Transient DOS in Audio while remapping channel buffer in media codec decoding. |