CWE-126 · Buffer Over-read (page 5)
Page 5 of 5 — CVEs classified under CWE-126, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-24858 | High | 7.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24857 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2022-40535 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
CVE-2022-33309 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
CVE-2023-21820 | High | 7.4 | 2023-02-14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2023-21813 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21811 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21720 | Medium | 5.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-21701 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
CVE-2023-21697 | Medium | 6.2 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-0817 | High | 7.8 | 2023-02-13 | Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2022-40512 | High | 7.5 | 2023-02-12 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
CVE-2022-34145 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information. |
CVE-2022-33306 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. |
CVE-2022-33271 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame. |
CVE-2022-33229 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. |
CVE-2022-33221 | Medium | 6.8 | 2023-02-12 | Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. |
CVE-2022-25738 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received |
CVE-2022-25732 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over read in dns client due to missing length check |
CVE-2022-25728 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-read while processing response from DNS server |
CVE-2023-0396 | Medium | 6.8 | 2023-01-25 | A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses. |
CVE-2022-4435 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privi… |
CVE-2022-4434 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information d… |
CVE-2022-4433 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges t… |
CVE-2022-4432 | Medium | 6.7 | 2023-01-05 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges t… |
CVE-2022-44446 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44445 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44443 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-42781 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42780 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42779 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42774 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42768 | Medium | 4.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42762 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42759 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42758 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42757 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-39132 | Medium | 5.5 | 2022-12-06 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39130 | Medium | 5.5 | 2022-12-06 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38673 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38671 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-3178 | High | 7.8 | 2022-09-12 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-20823 | High | 8.6 | 2022-08-25 | A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (Do… |
CVE-2020-35511 | High | 7.8 | 2022-08-23 | A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. |
CVE-2022-2301 | Medium | 5.5 | 2022-07-04 | Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. |
CVE-2022-32141 | Medium | 6.5 | 2022-06-24 | Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an inte… |
CVE-2022-2175 | High | 7.8 | 2022-06-23 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1720 | High | 7.8 | 2022-06-20 | Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modi… |
CVE-2022-2124 | High | 7.8 | 2022-06-19 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1987 | High | 8.1 | 2022-06-03 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1927 | High | 7.8 | 2022-05-29 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1908 | High | 8.1 | 2022-05-27 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1907 | High | 8.1 | 2022-05-27 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1769 | High | 7.8 | 2022-05-17 | Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. |
CVE-2022-1629 | High | 7.8 | 2022-05-10 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memo… |
CVE-2022-1534 | High | 7.1 | 2022-04-29 | Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the inten… |
CVE-2022-1533 | High | 7.8 | 2022-04-29 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution. |
CVE-2022-20714 | High | 8.6 | 2022-04-15 | A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated… |
CVE-2022-22519 | High | 7.5 | 2022-04-07 | A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the C… |
CVE-2022-23130 | Medium | 5.9 | 2022-01-21 | Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi El… |
CVE-2021-22563 | Medium | 4.5 | 2021-11-01 | Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either l… |
CVE-2021-34584 | Critical | 9.1 | 2021-10-26 | Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2… |
CVE-2021-1588 | High | 8.6 | 2021-08-25 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to… |
CVE-2021-22552 | Medium | 5.3 | 2021-08-02 | An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used b… |
CVE-2021-1614 | Medium | 5.3 | 2021-07-22 | A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker t… |
CVE-2021-34325 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applica… |
CVE-2021-34322 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The JPEG2K_Loader.dll library in affected… |
CVE-2021-34321 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The VisDraw.dll library in affected appli… |
CVE-2021-34320 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applica… |
CVE-2021-34308 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-34307 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected a… |
CVE-2021-34304 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected a… |
CVE-2021-34303 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected a… |
CVE-2021-34302 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-34299 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected a… |
CVE-2021-1373 | High | 8.6 | 2021-03-24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cis… |
CVE-2020-25853 | High | 7.5 | 2021-02-03 | The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size par… |
CVE-2020-3399 | High | 8.6 | 2020-09-24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series… |
CVE-2020-8244 | Medium | 6.5 | 2020-08-30 | A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it end… |
CVE-2019-1010220 | Low | 3.3 | 2019-07-22 | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component… |
CVE-2019-5432 | High | 7.5 | 2019-05-06 | A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2… |
CVE-2019-11036 | Critical | 9.1 | 2019-05-03 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated… |
CVE-2019-3563 | Critical | 9.8 | 2019-04-29 | Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects vers… |
CVE-2018-8799 | High | 7.5 | 2019-02-05 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault). |
CVE-2018-8798 | High | 7.5 | 2019-02-05 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak. |
CVE-2018-8796 | High | 7.5 | 2019-02-05 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault). |
CVE-2018-8792 | High | 7.5 | 2019-02-05 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault). |
CVE-2018-8791 | High | 7.5 | 2019-02-05 | rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak. |
CVE-2018-8789 | High | 7.5 | 2018-11-29 | FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault). |
CVE-2018-14790 | Critical | 9.8 | 2018-10-01 | Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnera… |
CVE-2017-7679 | Critical | 9.8 | 2017-06-20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response… |
CVE-2017-7668 | High | 7.5 | 2017-06-20 | The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the… |
CVE-2009-2495 | Medium | 6.5 | 2009-07-29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold… |