# CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

## Records, newest first (an older page)

- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33061.md)
  `CVE-2023-33061` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33048.md)
  `CVE-2023-33048` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33047.md)
  `CVE-2023-33047` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2023-28572.md)
  `CVE-2023-28572` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.6 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28569.md)
  `CVE-2023-28569` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28568.md)
  `CVE-2023-28568` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28566.md)
  `CVE-2023-28566` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in IOE Firmware](https://agentprime.io/advisories/CVE-2023-28563.md)
  `CVE-2023-28563` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in Qualcomm IPC](https://agentprime.io/advisories/CVE-2023-28554.md)
  `CVE-2023-28554` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2023-28553.md)
  `CVE-2023-28553` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-126
- [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-36581.md)
  `CVE-2023-36581` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33027.md)
  `CVE-2023-33027` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-126
- [Buffer over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33026.md)
  `CVE-2023-33026` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2023-28571.md)
  `CVE-2023-28571` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-126
- [Buffer Over-read in Data Modem](https://agentprime.io/advisories/CVE-2023-24849.md)
  `CVE-2023-24849` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-126
- [Buffer Over-read in Data Modem](https://agentprime.io/advisories/CVE-2023-24848.md)
  `CVE-2023-24848` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-126
- [Buffer Over-read in Data Modem](https://agentprime.io/advisories/CVE-2023-22385.md)
  `CVE-2023-22385` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-126
- [3D Builder Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36773.md)
  `CVE-2023-36773` · CVE record: Microsoft 3D Builder · CVSS 7.8 High · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-126
- [DHCP Server Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36801.md)
  `CVE-2023-36801` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-126
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36803.md)
  `CVE-2023-36803` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-126
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-38144.md)
  `CVE-2023-38144` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-126
- [DHCP Server Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-38152.md)
  `CVE-2023-38152` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 5.3 Medium · EPSS 0.24 · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33016.md)
  `CVE-2023-33016` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33015.md)
  `CVE-2023-33015` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Buffer Over-read in Bluetooth HOST](https://agentprime.io/advisories/CVE-2023-21667.md)
  `CVE-2023-21667` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Buffer over-read in Modem](https://agentprime.io/advisories/CVE-2022-40524.md)
  `CVE-2022-40524` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Buffer over-read in Automotive multimedia](https://agentprime.io/advisories/CVE-2022-33220.md)
  `CVE-2022-33220` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.1 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Buffer Over-read in gpac/gpac](https://agentprime.io/advisories/CVE-2023-4758.md)
  `CVE-2023-4758` · CVE record: gpac gpac/gpac · CVSS 5.9 Medium · Not analysed yet · Published 4 Sept 2023 · Tags: CWE-126
- [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-38172.md)
  `CVE-2023-38172` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-126
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36904.md)
  `CVE-2023-36904` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-126
- [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2023-28555.md)
  `CVE-2023-28555` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-126
- [Buffer Over-read in Network Services](https://agentprime.io/advisories/CVE-2023-21625.md)
  `CVE-2023-21625` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-126
- [Buffer Over-read in Wireshark](https://agentprime.io/advisories/CVE-2023-3649.md)
  `CVE-2023-3649` · CVE record: Wireshark Foundation Wireshark · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-126
- [Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-32085.md)
  `CVE-2023-32085` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Windows Extended Negotiation Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-35330.md)
  `CVE-2023-35330` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-35324.md)
  `CVE-2023-35324` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-33173.md)
  `CVE-2023-33173` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-33172.md)
  `CVE-2023-33172` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-33169.md)
  `CVE-2023-33169` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-33168.md)
  `CVE-2023-33168` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-33167.md)
  `CVE-2023-33167` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-33166.md)
  `CVE-2023-33166` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-126
- [Milesight UR32L: An access violation vulnerability exists in the eventcore functionality of Milesight…](https://agentprime.io/advisories/CVE-2023-23571.md)
  `CVE-2023-23571` · CVE record: Milesight UR32L · CVSS 7.5 High · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2023-28542.md)
  `CVE-2023-28542` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2023-28541.md)
  `CVE-2023-28541` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-126
- [\`openssl\` \`X509VerifyParamRef::set_host\` buffer over-read](https://agentprime.io/advisories/GHSA-xcf7-rvmh-g6q4.md)
  `GHSA-xcf7-rvmh-g6q4`, `CVE-2023-53159`, `RUSTSEC-2023-0044` · crates.io `openssl`: affected `>=0.10.0, <0.10.55`, fixed in `0.10.55` · CVSS 4.5 Medium · Not analysed yet · Published 21 Jun 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2023-21669.md)
  `CVE-2023-21669` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-21661.md)
  `CVE-2023-21661` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-21660.md)
  `CVE-2023-21660` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-21659.md)
  `CVE-2023-21659` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Buffer Over-Read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-21658.md)
  `CVE-2023-21658` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Remote Procedure Call Runtime Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-24942.md)
  `CVE-2023-24942` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 May 2023 · Tags: CWE-126
- [Windows NFS Portmapper Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-24901.md)
  `CVE-2023-24901` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 May 2023 · Tags: CWE-126
- [Buffer over-read in Trusted Execution Environment](https://agentprime.io/advisories/CVE-2022-33273.md)
  `CVE-2022-33273` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.3 High · Not analysed yet · Published 2 May 2023 · Tags: CWE-126
- [Buffer over-read in Modem](https://agentprime.io/advisories/CVE-2022-40505.md)
  `CVE-2022-40505` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 2 May 2023 · Tags: CWE-126
- [On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured option…](https://agentprime.io/advisories/CVE-2023-24513.md)
  `CVE-2023-24513` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-126
- [Remote Desktop Protocol Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-28267.md)
  `CVE-2023-28267` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-126
- [Windows Common Log File System Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-28266.md)
  `CVE-2023-28266` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-126
- [Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-24883.md)
  `CVE-2023-24883` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-126
- [Buffer over-read in Bluetooth Host.](https://agentprime.io/advisories/CVE-2022-40503.md)
  `CVE-2022-40503` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-126

Newest: <https://agentprime.io/advisories/tag/cwe-126.md>
Older: <https://agentprime.io/advisories/tag/cwe-126.md?cursor=WyIyMDIzLTA0LTA0VDA0OjQ2OjUzLjQ3OTAwMFoiLCJDVkUtMjAyMi00MDUwMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-126&cursor=WyIyMDIzLTExLTA4VDIyOjA1OjUzLjgyNjAwMFoiLCJDVkUtMjAyMy00MzU2OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-126/?cursor=WyIyMDIzLTExLTA4VDIyOjA1OjUzLjgyNjAwMFoiLCJDVkUtMjAyMy00MzU2OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.