Advisories · Weakness

CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

CVE-2022-33297 CVE record

CVSS 6.8 Medium

Buffer overread in Linux Sensors
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33295 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33291 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33287 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33258 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33228 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33222 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-25747 CVE record

CVSS 8.2 High

Buffer Over-read in MODEM
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-25730 CVE record

CVSS 8.2 High

Buffer Over-read in MODEM
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-25726 CVE record

CVSS 8.2 High

Buffer Over-read in MODEM
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2023-20112 CVE record

CVSS 7.4 High

Cisco Access Point Software Association Request Denial of Service Vulnerability
- Cisco Aironet Access Point Software
- CWE-126
Not analysed yet 23 Mar 2023
CVE-2023-24870 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2023-24858 CVE record

CVSS 7.5 High

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2023-24857 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2022-40535 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Mar 2023
CVE-2022-33309 CVE record

CVSS 7.5 High

Buiffer over-read in WLAN Firmware.
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Mar 2023
CVE-2023-21701 CVE record

CVSS 7.5 High

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21697 CVE record

CVSS 6.2 Medium

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21820 CVE record

CVSS 7.4 High

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21813 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21811 CVE record

CVSS 7.5 High

Windows iSCSI Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-21720 CVE record

CVSS 5.3 Medium

Microsoft Edge (Chromium-based) Tampering Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-126
Not analysed yet 14 Feb 2023
CVE-2023-0817 CVE record

CVSS 7.3 High

Buffer Over-read in gpac/gpac
- gpac/gpac
- CWE-126
Not analysed yet 13 Feb 2023
CVE-2022-40512 CVE record

CVSS 7.5 High

Buffer over-read in WLAN Firmware.
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-34145 CVE record

CVSS 7.5 High

Buffer over-read in WLAN Host
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-33306 CVE record

CVSS 7.5 High

Buffer over-read in WLAN
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-33271 CVE record

CVSS 8.2 High

Buffer over-read in WLAN
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-33229 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-33221 CVE record

CVSS 6.8 Medium

Buffer over-read in Trusted Execution Environment
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-25738 CVE record

CVSS 8.2 High

Buffer Over-read in MODEM
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-25732 CVE record

CVSS 8.2 High

Buffer Over-read in MODEM
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2022-25728 CVE record

CVSS 8.2 High

Buffer Over-read in MODEM
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 9 Feb 2023
CVE-2023-0396 CVE record

CVSS 6.8 Medium

Buffer Overreads in Bluetooth HCI
- zephyr
- CWE-126
Not analysed yet 19 Jan 2023
CVE-2022-4435 CVE record

CVSS 6.7 Medium

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
- Lenovo ThinkPad X13s
- CWE-126
Not analysed yet 5 Jan 2023
CVE-2022-4434 CVE record

CVSS 6.7 Medium

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.
- Lenovo ThinkPad X13s
- CWE-126
Not analysed yet 5 Jan 2023
CVE-2022-4433 CVE record

CVSS 6.7 Medium

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
- Lenovo ThinkPad X13s
- CWE-126
Not analysed yet 5 Jan 2023
CVE-2022-4432 CVE record

CVSS 6.7 Medium

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
- Lenovo ThinkPad X13s
- CWE-126
Not analysed yet 5 Jan 2023
CVE-2022-44446 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CWE-126
Not analysed yet 4 Jan 2023
CVE-2022-44445 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CWE-126
Not analysed yet 4 Jan 2023
CVE-2022-44443 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CWE-126
Not analysed yet 4 Jan 2023
CVE-2022-42781 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42780 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42779 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42774 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Unisoc (Shanghai) Technologies Co…
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002
- Memory corruption
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42768 CVE record

CVSS 4.3 Medium

Out-of-bounds read in Unisoc (Shanghai) Technologies Co…
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8013
- Memory corruption
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42762 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8004
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42759 CVE record

CVSS 5.5 Medium

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8017
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42758 CVE record

CVSS 3.3 Low

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8016
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-42757 CVE record

CVSS 3.3 Low

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8015
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-39132 CVE record

CVSS 5.5 Medium

Out-of-bounds write in Unisoc (Shanghai) Technologies Co…
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- Memory corruption
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-39130 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Unisoc (Shanghai) Technologies Co…
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- Memory corruption
- CWE-126
Not analysed yet 6 Dec 2022
CVE-2022-38673 CVE record

CVSS 5.5 Medium

In face detect driver, there is a possible out of bounds write due to a missing bounds check.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CWE-126
Not analysed yet 14 Oct 2022
CVE-2022-38671 CVE record

In camera driver, there is a possible out of bounds write due to a missing bounds check.
- Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CWE-126
Not analysed yet 14 Oct 2022
CVE-2022-3178 CVE record

CVSS 7.8 High

Buffer Over-read in gpac/gpac
- gpac/gpac
- CWE-126
Not analysed yet 12 Sept 2022
CVE-2022-20823 CVE record

CVSS 8.6 High

Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability
- Cisco NX-OS Software
- CWE-126
Not analysed yet 25 Aug 2022
CVE-2020-35511 CVE record

pngcheck: A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches…
- pngcheck
- CWE-126
Not analysed yet 23 Aug 2022
CVE-2022-2301 CVE record

CVSS 5.5 Medium

Buffer Over-read in hpjansson/chafa
- hpjansson/chafa
- CWE-126
Not analysed yet 4 Jul 2022
CVE-2022-32141 CVE record

CVSS 6.5 Medium

CODESYS runtime system prone to denial of service due to buffer over read
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- CWE-126
Not analysed yet 24 Jun 2022
CVE-2022-2175 CVE record

CVSS 7.8 High

Buffer Over-read in vim/vim
- vim/vim
- CWE-126
Not analysed yet 23 Jun 2022
CVE-2022-2124 CVE record

CVSS 7.8 High

Buffer Over-read in vim/vim
- vim/vim
- CWE-126
Not analysed yet 19 Jun 2022