CWE-126.

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

• CWE-126

Buffer Over-read in Windows Compute

• Qualcomm, Inc. Snapdragon
• CWE-126

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

• GNOME GLib
• Red Hat Enterprise Linux 10
• CWE-126

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

• GNOME GLib
• Red Hat Enterprise Linux 10
• CWE-126

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

• GNOME GLib
• Red Hat Enterprise Linux 10
• CWE-126

Global Buffer Overflow in GNU gzip

• GNU gzip
• CWE-126

Out-of-bounds read in SetMacAddrAction

• PowerDNS DNSdist
• CWE-126

Tornado has out-of-bounds memory access via C extension

• CWE-126

<6.5.6 · fixed in 6.5.6

Windows Projected File System Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• CWE-126

Microsoft Office Information Disclosure Vulnerability

• Microsoft 365 Apps for Enterprise
• Microsoft Office 2019
• CWE-126

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-126

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

• Apache Software Foundation Apache HTTP Server
• Memory corruption
• CWE-126

Buffer Over-read in WLAN Host Communication

• Qualcomm, Inc. Snapdragon
• CWE-126

scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

• Linux kernel
• CWE-126

slip: bound decode() reads against the compressed packet length

• Linux kernel
• CWE-126

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-126

OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

• Memory corruption
• CWE-126

>=0.7.0, <0.9.0 · fixed in 0.9.0

PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array

• PostgreSQL
• CWE-126

Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input

• LEONT Crypt::Argon2
• Memory corruption
• CWE-126

diesel-async may expose uninitialized padding bytes for MySQL temporal columns

• CWE-126

>=0.1.0, <0.9.0 · fixed in 0.9.0

Buffer Over-read in DSP Service

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in WLAN Firmware

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in WLAN HAL

• Qualcomm, Inc. Snapdragon
• CWE-126

Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

• Apache Software Foundation Apache HTTP Server
• CWE-126

AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library.

• CWE-126

Buffer Over-read in Wireshark

• Wireshark
• CWE-126

Buffer overread in ns_printrrf with corrupted RDATA field

• The GNU C Library glibc
• CWE-126

rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer

• CWE-126
• CWE-130

>=0.9.24, <0.10.78 · fixed in 0.10.78

Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize

• wolfSSL wolfSSH
• CWE-126

libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx

• libgphoto2
• CWE-126

Windows Projected File System Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• CWE-126

Windows Kernel Memory Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-126

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-126

MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation

• wolfSSL
• CWE-126

Buffer Over-read in WLAN Firmware

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Camera

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Camera

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Camera

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Camera

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Camera

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in WinBlast Driver

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in WLAN Firmware

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Computer Vision

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read in Camera

• Qualcomm, Inc. Snapdragon
• CWE-126

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.

• RTI Connext Professional
• CWE-126

Out-of-bounds read when parsing DNS packets via Lua

• PowerDNS DNSdist
• CWE-126

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

• OpenSC
• CWE-126

Out of bounds read in IMAP parsing

• Mozilla Thunderbird
• CWE-126
• CWE-130

fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing

• Memory corruption
• CWE-126

<3.5.8 · fixed in 3.5.8

Buffer Over-read in Graphics

• Qualcomm, Inc. Snapdragon
• CWE-126

Out-of-bounds read in OCaml

• OCaml
• Memory corruption
• CWE-126

Buffer Overread in FreeRDP Icon Processing

• FreeRDP
• CWE-126

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

• Memory corruption
• CWE-126

<14.10.3 · fixed in 14.10.3

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

• Memory corruption
• CWE-126

<14.10.3 · fixed in 14.10.3

Buffer Over-read in Wireshark

• Wireshark
• CWE-126

NanaZip has DotNet Single file OOB Heap Read

• M2Team NanaZip
• CWE-126

GDI+ Denial of Service Vulnerability

• Microsoft Office for Android
• Microsoft Windows 10 Version 1607
• CWE-126

LIBPNG has a heap buffer overflow in png_set_quantize

• pnggroup libpng
• Memory corruption
• CWE-126

Buffer Over-read in WLAN Firmware

• Qualcomm, Inc. Snapdragon
• CWE-126

A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.

• CWE-126