# CWE-126. Every Advisory and CVE whose sources give the weakness CWE-126, newest first. ## Records, newest first (an older page) - [Buffer Over-read in TZ Secure OS](https://agentprime.io/advisories/CVE-2024-21462.md) `CVE-2024-21462` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2024-21458.md) `CVE-2024-21458` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Host Communication](https://agentprime.io/advisories/CVE-2024-21457.md) `CVE-2024-21457` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2024-21456.md) `CVE-2024-21456` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-126 - [FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser](https://agentprime.io/advisories/CVE-2024-38373.md) `CVE-2024-38373` · CVE record: FreeRTOS FreeRTOS-Plus-TCP · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2024 · Tags: CWE-126 - [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-30069.md) `CVE-2024-30069` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2024-23363.md) `CVE-2024-23363` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 3 Jun 2024 · Tags: CWE-126 - [Buffer Over-read in Video](https://agentprime.io/advisories/CVE-2023-43555.md) `CVE-2023-43555` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Jun 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2023-43537.md) `CVE-2023-43537` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 3 Jun 2024 · Tags: CWE-126 - [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-30039.md) `CVE-2024-30039` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 May 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2024-21477.md) `CVE-2024-21477` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 May 2024 · Tags: CWE-126 - [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2023-43528.md) `CVE-2023-43528` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 6 May 2024 · Tags: CWE-126 - [Buffer Over-read in Video](https://agentprime.io/advisories/CVE-2023-43527.md) `CVE-2023-43527` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.8 Medium · Not analysed yet · Published 6 May 2024 · Tags: CWE-126 - [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-28900.md) `CVE-2024-28900` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-126 - [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26243.md) `CVE-2024-26243` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-126 - [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-28902.md) `CVE-2024-28902` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-126 - [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-28901.md) `CVE-2024-28901` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-126 - [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26255.md) `CVE-2024-26255` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap](https://agentprime.io/advisories/CVE-2024-31082.md) `CVE-2024-31082` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice](https://agentprime.io/advisories/CVE-2024-31081.md) `CVE-2024-31081` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents](https://agentprime.io/advisories/CVE-2024-31080.md) `CVE-2024-31080` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Buffer Over-read in Trusted Execution Environment](https://agentprime.io/advisories/CVE-2023-33115.md) `CVE-2023-33115` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 1 Apr 2024 · Tags: CWE-126 - [Bluetooth: integer underflow in gatt_find_info_rsp](https://agentprime.io/advisories/CVE-2024-3077.md) `CVE-2024-3077` · CVE record: zephyrproject-rtos Zephyr · CVSS 6.8 Medium · Not analysed yet · Published 29 Mar 2024 · Tags: Memory corruption, CWE-126 - [Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString().](https://agentprime.io/advisories/CVE-2023-45919.md) `CVE-2023-45919` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-126 - [StringIO buffer overread vulnerability](https://agentprime.io/advisories/GHSA-v5h6-c2hv-hv3r.md) `GHSA-v5h6-c2hv-hv3r`, `CVE-2024-27280` · RubyGems `stringio`: affected `<3.0.1.1`, fixed in `3.0.1.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Mar 2024 · Tags: Memory corruption, CWE-126 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26176.md) `CVE-2024-26176` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-126 - [Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26160.md) `CVE-2024-26160` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 5.5 Medium · EPSS 0.11 · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-43539.md) `CVE-2023-43539` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-126 - [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2023-33090.md) `CVE-2023-33090` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-126 - [Buffer Over-read in DSP Services](https://agentprime.io/advisories/CVE-2023-33078.md) `CVE-2023-33078` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.1 Medium · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-126 - [Heap-buffer over-read with WOLFSSL_CALLBACKS](https://agentprime.io/advisories/CVE-2023-6936.md) `CVE-2023-6936` · CVE record: wolfSSL wolfSSL · CVSS 5.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-126 - [A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.](https://agentprime.io/advisories/CVE-2023-39541.md) `CVE-2023-39541` · CVE record: Silicon Labs Gecko Platform and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-126 - [A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.](https://agentprime.io/advisories/CVE-2023-39540.md) `CVE-2023-39540` · CVE record: Silicon Labs Gecko Platform and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-126 - [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21340.md) `CVE-2024-21340` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-126 - [A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.](https://agentprime.io/advisories/CVE-2024-20290.md) `CVE-2024-20290` · CVE record: Cisco Cisco Secure Endpoint and 2 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.33 · Not analysed yet · Published 7 Feb 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-43536.md) `CVE-2023-43536` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-43533.md) `CVE-2023-43533` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-126 - [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2023-33065.md) `CVE-2023-33065` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-126 - [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2023-33064.md) `CVE-2023-33064` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-126 - [Buffer Over-read in Core](https://agentprime.io/advisories/CVE-2023-33060.md) `CVE-2023-33060` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-126 - [Buffer Copy Without Checking Size of Input in Modem](https://agentprime.io/advisories/CVE-2023-33058.md) `CVE-2023-33058` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-126 - [Memory corruption issues is Cloudflare zlib implementation](https://agentprime.io/advisories/CVE-2023-6992.md) `CVE-2023-6992` · CVE record: Cloudflare zlib · CVSS 4.0 Medium · Not analysed yet · Published 4 Jan 2024 · Tags: Memory corruption, CWE-20, CWE-126 - [Buffer Over-read in Qualcomm ESL](https://agentprime.io/advisories/CVE-2023-43512.md) `CVE-2023-43512` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126 - [Buffer over-read without Checking Size of Input in WLAN Host](https://agentprime.io/advisories/CVE-2023-33116.md) `CVE-2023-33116` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33112.md) `CVE-2023-33112` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33062.md) `CVE-2023-33062` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126 - [Buffer Over-read in Data Modem](https://agentprime.io/advisories/CVE-2023-33040.md) `CVE-2023-33040` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126 - [BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.](https://agentprime.io/advisories/CVE-2023-51773.md) `CVE-2023-51773` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Dec 2023 · Tags: CWE-126 - [DHCP Server Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-35643.md) `CVE-2023-35643` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-126 - [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-35638.md) `CVE-2023-35638` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33098.md) `CVE-2023-33098` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33097.md) `CVE-2023-33097` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126 - [Buffer over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33081.md) `CVE-2023-33081` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126 - [Buffer over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33080.md) `CVE-2023-33080` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126 - [Denial of Service in HTTP Message Processing in Squid](https://agentprime.io/advisories/CVE-2023-49285.md) `CVE-2023-49285` · CVE record: squid-cache squid · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.88 · Not analysed yet · Published 4 Dec 2023 · Tags: CWE-126 - [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-36392.md) `CVE-2023-36392` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-126 - [Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36397.md) `CVE-2023-36397` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-126 - [A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive informatio…](https://agentprime.io/advisories/CVE-2023-43574.md) `CVE-2023-43574` · CVE record: Lenovo Desktop BIOS · CVSS 4.4 Medium · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-126 - [A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.](https://agentprime.io/advisories/CVE-2023-43572.md) `CVE-2023-43572` · CVE record: Lenovo Desktop BIOS · CVSS 4.4 Medium · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-126 - [A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.](https://agentprime.io/advisories/CVE-2023-43568.md) `CVE-2023-43568` · CVE record: Lenovo Desktop BIOS · CVSS 4.4 Medium · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-126 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .