CWE-126 · Buffer Over-read (page 5)
Page 5 of 6 — CVEs classified under CWE-126, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21625 | High | 8.2 | 2023-08-08 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response. |
CVE-2023-3649 | Medium | 5.3 | 2023-07-14 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
CVE-2023-35330 | High | 7.5 | 2023-07-11 | Windows Extended Negotiation Denial of Service Vulnerability |
CVE-2023-35324 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-33173 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33172 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33169 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33168 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33167 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33166 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32085 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-23571 | High | 7.5 | 2023-07-06 | An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of… |
CVE-2023-28542 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while fetching TX status information. |
CVE-2023-28541 | High | 7.8 | 2023-07-04 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
CVE-2023-21669 | High | 8.2 | 2023-06-06 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. |
CVE-2023-21661 | High | 7.5 | 2023-06-06 | Transient DOS while parsing WLAN beacon or probe-response frame. |
CVE-2023-21660 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while parsing FT Information Elements. |
CVE-2023-21659 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
CVE-2023-21658 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
CVE-2023-24942 | High | 7.5 | 2023-05-09 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-24901 | High | 7.5 | 2023-05-09 | Windows NFS Portmapper Information Disclosure Vulnerability |
CVE-2022-33273 | High | 7.3 | 2023-05-02 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
CVE-2022-40505 | High | 8.2 | 2023-05-02 | Information disclosure due to buffer over-read in Modem while parsing DNS hostname. |
CVE-2022-40503 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
CVE-2022-33297 | Medium | 6.8 | 2023-04-13 | Information disclosure due to buffer overread in Linux sensors |
CVE-2022-33295 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length. |
CVE-2022-33291 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. |
CVE-2022-33287 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. |
CVE-2022-33258 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read in modem while reading configuration parameters. |
CVE-2022-33228 | High | 8.2 | 2023-04-13 | Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. |
CVE-2022-33222 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read while parsing DNS response packets in Modem. |
CVE-2022-25747 | High | 8.2 | 2023-04-13 | Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message |
CVE-2022-25730 | High | 8.2 | 2023-04-13 | Information disclosure in modem due to improper check of IP type while processing DNS server query |
CVE-2022-25726 | High | 8.2 | 2023-04-13 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet |
CVE-2023-24513 | Medium | 6.5 | 2023-04-12 | On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malf… |
CVE-2023-28267 | Medium | 6.5 | 2023-04-11 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2023-28266 | Medium | 5.5 | 2023-04-11 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2023-24883 | Medium | 6.5 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-20112 | High | 7.4 | 2023-03-23 | A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affect… |
CVE-2023-24870 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24858 | High | 7.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24857 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2022-40535 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
CVE-2022-33309 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
CVE-2023-21820 | High | 7.4 | 2023-02-14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2023-21813 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21811 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21720 | Medium | 5.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-21701 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
CVE-2023-21697 | Medium | 6.2 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-0817 | High | 7.8 | 2023-02-13 | Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2022-40512 | High | 7.5 | 2023-02-12 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
CVE-2022-34145 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information. |
CVE-2022-33306 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. |
CVE-2022-33271 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame. |
CVE-2022-33229 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. |
CVE-2022-33221 | Medium | 6.8 | 2023-02-12 | Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. |
CVE-2022-25738 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received |
CVE-2022-25732 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over read in dns client due to missing length check |
CVE-2022-25728 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-read while processing response from DNS server |
CVE-2023-0396 | Medium | 6.8 | 2023-01-25 | A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses. |
CVE-2022-4435 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privi… |
CVE-2022-4434 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information d… |
CVE-2022-4433 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges t… |
CVE-2022-4432 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges t… |
CVE-2022-44446 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44445 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44443 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-42781 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42780 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42779 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42774 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42768 | Medium | 4.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42762 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42759 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42758 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42757 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-39132 | Medium | 5.5 | 2022-12-06 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39130 | Medium | 5.5 | 2022-12-06 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38673 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38671 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-3178 | High | 7.8 | 2022-09-12 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-20823 | High | 8.6 | 2022-08-25 | A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (Do… |
CVE-2020-35511 | High | 7.8 | 2022-08-23 | A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. |
CVE-2022-2301 | Medium | 5.5 | 2022-07-04 | Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. |
CVE-2022-32141 | Medium | 6.5 | 2022-06-24 | Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an inte… |
CVE-2022-2175 | High | 7.8 | 2022-06-23 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1720 | High | 7.8 | 2022-06-20 | Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modi… |
CVE-2022-2124 | High | 7.8 | 2022-06-19 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1987 | High | 8.1 | 2022-06-03 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1927 | High | 7.8 | 2022-05-29 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1908 | High | 8.1 | 2022-05-27 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1907 | High | 8.1 | 2022-05-27 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1769 | High | 7.8 | 2022-05-17 | Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. |
CVE-2022-1629 | High | 7.8 | 2022-05-10 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memo… |
CVE-2022-1534 | High | 7.1 | 2022-04-29 | Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the inten… |
CVE-2022-1533 | High | 7.8 | 2022-04-29 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution. |
CVE-2022-20714 | High | 8.6 | 2022-04-15 | A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated… |
CVE-2022-22519 | High | 7.5 | 2022-04-07 | A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the C… |
CVE-2022-23130 | Medium | 5.9 | 2022-01-21 | Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi El… |