Advisories · Weakness

CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

CVE-2024-21462 CVE record

CVSS 7.1 High

Buffer Over-read in TZ Secure OS
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 1 Jul 2024
CVE-2024-21458 CVE record

CVSS 6.5 Medium

Buffer Over-read in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 1 Jul 2024
CVE-2024-21457 CVE record

CVSS 6.5 Medium

Buffer Over-read in WLAN Host Communication
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 1 Jul 2024
CVE-2024-21456 CVE record

CVSS 6.5 Medium

Buffer Over-read in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 1 Jul 2024
CVE-2024-38373 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser
- FreeRTOS-Plus-TCP
- CWE-126
Not analysed yet 24 Jun 2024
CVE-2024-30069 CVE record

CVSS 4.7 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 11 Jun 2024
CVE-2024-23363 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Jun 2024
CVE-2023-43555 CVE record

CVSS 8.2 High

Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Jun 2024
CVE-2023-43537 CVE record

CVSS 6.5 Medium

Buffer Over-read in WLAN Host
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Jun 2024
CVE-2024-30039 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 May 2024
CVE-2024-21477 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 May 2024
CVE-2023-43528 CVE record

CVSS 6.1 Medium

Buffer Over-read in Audio
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 May 2024
CVE-2023-43527 CVE record

CVSS 6.8 Medium

Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 May 2024
CVE-2024-28900 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-26243 CVE record

CVSS 7.0 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-28902 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-28901 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-26255 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-31082 CVE record

CVSS 7.3 High

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-126
Not analysed yet 4 Apr 2024
CVE-2024-31081 CVE record

CVSS 7.3 High

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- CWE-126
Not analysed yet 4 Apr 2024
CVE-2024-31080 CVE record

CVSS 7.3 High

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- CWE-126
Not analysed yet 4 Apr 2024
CVE-2023-33115 CVE record

CVSS 7.8 High

Buffer Over-read in Trusted Execution Environment
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 1 Apr 2024
CVE-2024-3077 CVE record

CVSS 6.8 Medium

Bluetooth: integer underflow in gatt_find_info_rsp
- Zephyr
- Memory corruption
- CWE-126
Not analysed yet 29 Mar 2024
CVE-2023-45919 CVE record

CVSS 5.3 Medium

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString().
- CWE-126
Not analysed yet 27 Mar 2024
stringio RubyGems

CVSS 9.8 CriticalCritical · CVSS 9+

StringIO buffer overread vulnerability
- Memory corruption
- CWE-126
<3.0.1.1 · fixed in 3.0.1.1

GHSA-v5h6-c2hv-hv3r · CVE-2024-27280 Not analysed yet 25 Mar 2024
CVE-2024-26176 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Mar 2024
CVE-2024-26160 CVE record

CVSS 5.5 Medium

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-126
Not analysed yet 12 Mar 2024
CVE-2023-43539 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Mar 2024
CVE-2023-33090 CVE record

CVSS 5.5 Medium

Buffer Over-read in Audio
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Mar 2024
CVE-2023-33078 CVE record

CVSS 5.1 Medium

Buffer Over-read in DSP Services
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Mar 2024
CVE-2023-6936 CVE record

CVSS 5.3 Medium

Heap-buffer over-read with WOLFSSL_CALLBACKS
- wolfSSL
- CWE-126
Not analysed yet 20 Feb 2024
CVE-2023-39541 CVE record

CVSS 5.9 Medium

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
- Silicon Labs Gecko Platform
- Weston Embedded uC-TCP-IP
- CWE-126
Not analysed yet 20 Feb 2024
CVE-2023-39540 CVE record

CVSS 5.9 Medium

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
- Silicon Labs Gecko Platform
- Weston Embedded uC-TCP-IP
- CWE-126
Not analysed yet 20 Feb 2024
CVE-2024-21340 CVE record

CVSS 4.6 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 13 Feb 2024
CVE-2024-20290 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
- Cisco Secure Endpoint
- Cisco Secure Endpoint Private Cloud Administration Portal
- CWE-126
Not analysed yet 7 Feb 2024
CVE-2023-43536 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Feb 2024
CVE-2023-43533 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Feb 2024
CVE-2023-33065 CVE record

CVSS 6.1 Medium

Buffer Over-read in Audio
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Feb 2024
CVE-2023-33064 CVE record

CVSS 5.5 Medium

Buffer Over-read in Audio
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Feb 2024
CVE-2023-33060 CVE record

CVSS 7.1 High

Buffer Over-read in Core
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Feb 2024
CVE-2023-33058 CVE record

CVSS 8.2 High

Buffer Copy Without Checking Size of Input in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Feb 2024
CVE-2023-6992 CVE record

CVSS 4.0 Medium

Memory corruption issues is Cloudflare zlib implementation
- Cloudflare zlib
- Memory corruption
- CWE-20
Not analysed yet 4 Jan 2024
CVE-2023-43512 CVE record

CVSS 7.5 High

Buffer Over-read in Qualcomm ESL
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 Jan 2024
CVE-2023-33116 CVE record

CVSS 7.5 High

Buffer over-read without Checking Size of Input in WLAN Host
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 Jan 2024
CVE-2023-33112 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 Jan 2024
CVE-2023-33062 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 Jan 2024
CVE-2023-33040 CVE record

CVSS 7.5 High

Buffer Over-read in Data Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 Jan 2024
CVE-2023-51773 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
- CWE-126
Not analysed yet 25 Dec 2023
CVE-2023-35643 CVE record

CVSS 7.5 High

DHCP Server Service Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 12 Dec 2023
CVE-2023-35638 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 12 Dec 2023
CVE-2023-33098 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Dec 2023
CVE-2023-33097 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Dec 2023
CVE-2023-33081 CVE record

CVSS 7.5 High

Buffer over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Dec 2023
CVE-2023-33080 CVE record

CVSS 7.5 High

Buffer over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Dec 2023
CVE-2023-49285 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Denial of Service in HTTP Message Processing in Squid
- squid
- CWE-126
Not analysed yet 4 Dec 2023
CVE-2023-36392 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 14 Nov 2023
CVE-2023-36397 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Nov 2023
CVE-2023-43574 CVE record

CVSS 4.4 Medium

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive informatio…
- Lenovo Desktop BIOS
- CWE-126
Not analysed yet 8 Nov 2023
CVE-2023-43572 CVE record

CVSS 4.4 Medium

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
- Lenovo Desktop BIOS
- CWE-126
Not analysed yet 8 Nov 2023
CVE-2023-43568 CVE record

CVSS 4.4 Medium

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
- Lenovo Desktop BIOS
- CWE-126
Not analysed yet 8 Nov 2023