Advisories · Weakness
CWE-126.
Every Advisory and CVE whose sources give the weakness CWE-126, newest first.
- CVSS 8.7 High
Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-126
- CVSS 6.5 Medium
Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 5.5 Medium
Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 1.9 Low
OOBR and OOBW in pcap_ether_aton() in libpcap
- The Tcpdump Group libpcap
- Memory corruption
- CWE-126
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- Memory corruption
- CWE-126
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-126
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 6.5 Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CVSS 9.1 CriticalCritical · CVSS 9+
OpenVPN: Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker…
- OpenVPN
- CWE-126
- CVSS 7.3 High
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) as an unprivileged user.
- CWE-126
- CVSS 7.8 High
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CVSS 4.8 Medium
QuickJS quickjs.c js_array_buffer_slice buffer over-read
- QuickJS
- Memory corruption
- CWE-126
- CVSS 7.8 High
Buffer Over-read in DSP Service
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Automotive Software platform based on QNX
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Core Services
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.9 Medium
Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match
- wazuh
- CWE-126
- CWE-170
- CVSS 2.1 Low
Wazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevt
- wazuh
- CWE-126
- CVSS 5.3 Medium
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
- CWE-126
- CVSS 6.9 Medium
Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages
- Eclipse Foundation NetX Duo
- CWE-126
- CVSS 6.9 Medium
Potential out of bound read in _nx_ipv4_option_process()
- Eclipse Foundation NetX Duo
- Memory corruption
- CWE-126
- CVSS 6.9 Medium
Potential out of bound read in _nx_ip_packet_receive()
- Eclipse Foundation NetX Duo
- Memory corruption
- CWE-126
- CVSS 6.9 Medium
Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo
- Eclipse Foundation NetX Duo
- Memory corruption
- CWE-126
- CVSS 6.9 Medium
Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()
- Eclipse Foundation NetX Duo
- CWE-126
- CVSS 6.9 Medium
Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()
- Eclipse Foundation NetX Duo
- CWE-126
- CVSS 6.9 Medium
Potential out of bound read in _nx_secure_tls_process_clienthello()
- Eclipse Foundation NetX Duo
- CWE-126
- CVSS 7.8 High
Storport.sys Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
- CVSS 5.5 Medium
Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
- CVSS 5.3 Medium
Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP
- AWS FreeRTOS-Plus-TCP
- CWE-126
- CVSS 5.3 Medium
Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP
- AWS FreeRTOS-Plus_TCP
- CWE-126
- CVSS 5.5 Medium
Buffer Over-read in Camera
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 5.5 Medium
Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 5.1 Medium
libvips is vulnerable to Buffer Over-Read in poppler-based pdfload
- libvips
- CWE-126
- CVSS 7.5 High
Buffer Over-read in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 7.5 High
Buffer Over-read in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 7.5 High
Buffer Over-read in BT Controller
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 7.8 High
Buffer Over-read in BT Controller
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Video
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Audio
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 8.2 High
Buffer Over-read in Data Network Stack & Connectivity
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 8.2 High
Buffer Over-read in Data Network Stack & Connectivity
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 8.2 High
Buffer Over-read in Data Network Stack & Connectivity
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 4.8 Medium
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.
- RTI Connext Professional
- CWE-126
- CWE-193
- CVSS 5.5 Medium
Microsoft Excel Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- CWE-126
- CVSS 6.5 Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-126
- CVSS 6.5 Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
- CVSS 6.5 Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
- CVSS 6.5 Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
- CVSS 8.8 High
EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
- Microsoft .NET 6.0
- CWE-126
- CVSS 6.8 Medium
Microsoft Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-126
- CVSS 7.8 High
Buffer Over-read in Camera
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 7.5 High
Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 6.1 Medium
Buffer Over-read in Automotive OS Platform Android
- Qualcomm, Inc. Snapdragon
- CWE-126
- CVSS 4.5 Medium
Duplicate Advisory: `openssl` `X509VerifyParamRef::set_host` buffer over-read
- CWE-126
>=0.10.0, <0.10.55 · fixed in 0.10.55
GHSA-gw89-822v-8v8g - CVSS 6.9 Medium
Modbus TCP buffer overread
- ABB AC500 V2
- CWE-126
- CVSS 5.5 Medium
Windows Storage Port Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126