# CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

## Records, newest first (an older page)

- [Buffer Over-read in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2022-1987.md)
  `CVE-2022-1987` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 2.5 Low · Not analysed yet · Published 3 Jun 2022 · Tags: CWE-126
- [Buffer Over-read in vim/vim](https://agentprime.io/advisories/CVE-2022-1927.md)
  `CVE-2022-1927` · CVE record: vim vim/vim · CVSS 7.8 High · Not analysed yet · Published 29 May 2022 · Tags: CWE-126
- [Buffer Over-read in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2022-1908.md)
  `CVE-2022-1908` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 3.6 Low · Not analysed yet · Published 27 May 2022 · Tags: CWE-126
- [Buffer Over-read in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2022-1907.md)
  `CVE-2022-1907` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 3.6 Low · Not analysed yet · Published 27 May 2022 · Tags: CWE-126
- [Buffer Over-read in vim/vim](https://agentprime.io/advisories/CVE-2022-1769.md)
  `CVE-2022-1769` · CVE record: vim vim/vim · CVSS 6.6 Medium · Not analysed yet · Published 17 May 2022 · Tags: CWE-126
- [Buffer Over-read in function grab_file_name in vim/vim](https://agentprime.io/advisories/CVE-2022-1720.md)
  `CVE-2022-1720` · CVE record: vim vim/vim · CVSS 6.6 Medium · Not analysed yet · Published 16 May 2022 · Tags: CWE-126
- [Buffer Over-read in function find_next_quote in vim/vim](https://agentprime.io/advisories/CVE-2022-1629.md)
  `CVE-2022-1629` · CVE record: vim vim/vim · CVSS 6.6 Medium · Not analysed yet · Published 10 May 2022 · Tags: CWE-126
- [Apache Tomcat Buffer Over-Read](https://agentprime.io/advisories/GHSA-jpqr-vh55-xqxf.md)
  `GHSA-jpqr-vh55-xqxf`, `CVE-2006-7197` · Maven `org.apache.tomcat:tomcat`: affected `<=5.5.15`, no fixed version yet · No CVSS score · Not analysed yet · Published 1 May 2022 · Tags: CWE-126
- [Buffer Over-read in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2022-1533.md)
  `CVE-2022-1533` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 6.6 Medium · Not analysed yet · Published 29 Apr 2022 · Tags: CWE-126
- [Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2022-1534.md)
  `CVE-2022-1534` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 6.6 Medium · Not analysed yet · Published 29 Apr 2022 · Tags: CWE-126
- [Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20714.md)
  `CVE-2022-20714` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-126
- [Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.](https://agentprime.io/advisories/CVE-2022-22519.md)
  `CVE-2022-22519` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2022 · Tags: CWE-126
- [Mitsubishi Electric Corporation GENESIS64: Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E…](https://agentprime.io/advisories/CVE-2022-23130.md)
  `CVE-2022-23130` · CVE record: Mitsubishi Electric Corporation GENESIS64 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 21 Jan 2022 · Tags: CWE-126
- [Memory Overread in libjxl](https://agentprime.io/advisories/CVE-2021-22563.md)
  `CVE-2021-22563` · CVE record: Google LLC libjxl · CVSS 4.5 Medium · Not analysed yet · Published 1 Nov 2021 · Tags: CWE-126
- [CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)](https://agentprime.io/advisories/CVE-2021-34584.md)
  `CVE-2021-34584` · CVE record: CODESYS CODESYS V2 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2021 · Tags: CWE-126
- [Cisco NX-OS Software MPLS OAM Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1588.md)
  `CVE-2021-1588` · CVE record: Cisco Cisco NX-OS Software · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-126
- [Memory overread secure enclave in Asylo 0.6.2](https://agentprime.io/advisories/CVE-2021-22552.md)
  `CVE-2021-22552` · CVE record: Google LLC Asylo · CVSS 5.3 Medium · Not analysed yet · Published 2 Aug 2021 · Tags: CWE-126
- [Cisco SD-WAN Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1614.md)
  `CVE-2021-1614` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34325.md)
  `CVE-2021-34325` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34322.md)
  `CVE-2021-34322` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34321.md)
  `CVE-2021-34321` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34320.md)
  `CVE-2021-34320` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34308.md)
  `CVE-2021-34308` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34307.md)
  `CVE-2021-34307` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34304.md)
  `CVE-2021-34304` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34303.md)
  `CVE-2021-34303` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34302.md)
  `CVE-2021-34302` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…](https://agentprime.io/advisories/CVE-2021-34299.md)
  `CVE-2021-34299` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2021 · Tags: CWE-126
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1373.md)
  `CVE-2021-1373` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-126
- [Realtek RTL8195A Wi-Fi Module: The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released…](https://agentprime.io/advisories/CVE-2020-25853.md)
  `CVE-2020-25853` · CVE record: Realtek RTL8195A Wi-Fi Module · No CVSS score · Not analysed yet · Published 3 Feb 2021 · Tags: CWE-126
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3399.md)
  `CVE-2020-3399` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-126
- [Remote Memory Exposure in bl](https://agentprime.io/advisories/GHSA-pp7h-53gx-mx7r.md)
  `GHSA-pp7h-53gx-mx7r`, `CVE-2020-8244` · npm `bl`: affected `<1.2.3 || >=2.0.0, <2.2.1 || >=3.0.0, <3.0.1 || >=4.0.0, <4.0.3`, fixed in `1.2.3`, `2.2.1`, `3.0.1`, `4.0.3` · CVSS 6.5 Medium · Not analysed yet · Published 2 Sept 2020 · Tags: Memory corruption, CWE-126
- [tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read.](https://agentprime.io/advisories/CVE-2019-1010220.md)
  `CVE-2019-1010220` · CVE record: tcpdump.org tcpdump · No CVSS score · Not analysed yet · Published 22 Jul 2019 · Tags: CWE-126
- [Improper Input Validation and Buffer Over-read in mqtt-packet](https://agentprime.io/advisories/GHSA-wv67-9jq7-8r69.md)
  `GHSA-wv67-9jq7-8r69`, `CVE-2019-5432` · npm `mqtt-packet`: affected `<3.5.1 || >=4.0.0, <4.1.3 || >=5.0.0, <5.6.1 || >=6.0.0, <6.1.2`, fixed in `3.5.1`, `4.1.3`, `5.6.1`, `6.1.2` · CVSS 7.5 High · Not analysed yet · Published 14 May 2019 · Tags: Memory corruption, CWE-126
- [Heap over-read in PHP EXIF extension](https://agentprime.io/advisories/CVE-2019-11036.md)
  `CVE-2019-11036` · CVE record: PHP Group PHP · CVSS 4.8 Medium · Not analysed yet · Published 3 May 2019 · Tags: CWE-126
- [Facebook Wangle: Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly…](https://agentprime.io/advisories/CVE-2019-3563.md)
  `CVE-2019-3563` · CVE record: Facebook Wangle · No CVSS score · Not analysed yet · Published 29 Apr 2019 · Tags: CWE-126
- [Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…](https://agentprime.io/advisories/CVE-2018-8799.md)
  `CVE-2018-8799` · CVE record: Check Point Software Technologies Ltd. rdesktop · No CVSS score · Not analysed yet · Published 5 Feb 2019 · Tags: CWE-126
- [Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…](https://agentprime.io/advisories/CVE-2018-8798.md)
  `CVE-2018-8798` · CVE record: Check Point Software Technologies Ltd. rdesktop · No CVSS score · Not analysed yet · Published 5 Feb 2019 · Tags: CWE-126
- [Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…](https://agentprime.io/advisories/CVE-2018-8796.md)
  `CVE-2018-8796` · CVE record: Check Point Software Technologies Ltd. rdesktop · No CVSS score · Not analysed yet · Published 5 Feb 2019 · Tags: CWE-126
- [Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…](https://agentprime.io/advisories/CVE-2018-8792.md)
  `CVE-2018-8792` · CVE record: Check Point Software Technologies Ltd. rdesktop · No CVSS score · Not analysed yet · Published 5 Feb 2019 · Tags: CWE-126
- [Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…](https://agentprime.io/advisories/CVE-2018-8791.md)
  `CVE-2018-8791` · CVE record: Check Point Software Technologies Ltd. rdesktop · No CVSS score · Not analysed yet · Published 5 Feb 2019 · Tags: CWE-126
- [Check Point Software Technologies Ltd. FreeRDP: FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM…](https://agentprime.io/advisories/CVE-2018-8789.md)
  `CVE-2018-8789` · CVE record: Check Point Software Technologies Ltd. FreeRDP · No CVSS score · Not analysed yet · Published 29 Nov 2018 · Tags: CWE-126
- [Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace.](https://agentprime.io/advisories/CVE-2018-14790.md)
  `CVE-2018-14790` · CVE record: Fuji Electric FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace · No CVSS score · Not analysed yet · Published 1 Oct 2018 · Tags: CWE-126
- [In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.](https://agentprime.io/advisories/CVE-2017-7679.md)
  `CVE-2017-7679` · CVE record: Apache Software Foundation Apache HTTP Server · No CVSS score · EPSS 0.39 · Not analysed yet · Published 20 Jun 2017 · Tags: CWE-126
- [The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string.](https://agentprime.io/advisories/CVE-2017-7668.md)
  `CVE-2017-7668` · CVE record: Apache Software Foundation Apache HTTP Server · No CVSS score · EPSS 0.57 · Not analysed yet · Published 20 Jun 2017 · Tags: CWE-126
- [The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce strin…](https://agentprime.io/advisories/CVE-2009-2495.md)
  `CVE-2009-2495` · CVE record · CVSS 6.5 Medium · EPSS 0.34 · Not analysed yet · Published 29 Jul 2009 · Tags: CWE-126

Newest: <https://agentprime.io/advisories/tag/cwe-126.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-126&cursor=WyIyMDIyLTA2LTE5VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMTI0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-126/?cursor=WyIyMDIyLTA2LTE5VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMTI0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.