CWE-126

Buffer Over-read

Parent: CWE-125 - Out-of-bounds Read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

449 vulnerabilities with CWE-126
CVE-2023-33081 HIGH
Qualcomm AQT1000 Firmware - Denial of Service via TWT Frame Parameter Conversion
CVSS 7.5
CVE-2023-33080 HIGH
Qualcomm Modem Firmware - Denial of Service via Reassociation Response Frame Parsing
CVSS 7.5
CVE-2023-49285 HIGH
squid < 6.4 - Denial of Service via HTTP Message Processing Buffer Overread
CVSS 8.6
CVE-2023-36397 CRITICAL
Microsoft Windows PGM - Remote Code Execution
CVSS 9.8
CVE-2023-36392 HIGH
Windows Server 2012, 2016, 2019, 2022 - Denial of Service in DHCP Server Service
CVSS 7.5
CVE-2023-43574 MEDIUM
Lenovo IdeaCentre and ThinkCentre Firmware - Out-of-bounds Read in LEMALLDriversConnectedEventHook
CVSS 4.4
CVE-2023-43572 MEDIUM
Lenovo Desktop Firmware - Out-of-bounds Read in BiosExtensionLoader
CVSS 4.4
CVE-2023-43568 MEDIUM
Lenovo IdeaCentre and ThinkCentre Firmware - Buffer Over-read in LemSecureBootForceKey Module
CVSS 4.4
CVE-2023-33061 HIGH
Qualcomm WLAN Firmware - Denial of Service via Malformed Beacon or Probe-Response Frame
CVSS 7.5
CVE-2023-33048 HIGH
Qualcomm WLAN Firmware - Denial of Service via t2lm Buffer Parsing
CVSS 7.5
CVE-2023-33047 HIGH
Qualcomm WLAN Firmware - Denial of Service via No-Inherit IES Parsing
CVSS 7.5
CVE-2023-28572 MEDIUM
Qualcomm WLAN HOST - Memory Corruption
CVSS 6.6
CVE-2023-28569 MEDIUM
Qualcomm WLAN HAL - Information Disclosure
CVSS 6.1
CVE-2023-28568 MEDIUM
Qualcomm WLAN HAL - Information Disclosure via Reception Status Handler
CVSS 6.1
CVE-2023-28566 MEDIUM
Qualcomm WLAN HAL - Information Disclosure
CVSS 6.1
CVE-2023-28563 MEDIUM
Qualcomm IOE Firmware - Buffer Over-read via WMI Command Handling
CVSS 6.1
CVE-2023-28554 MEDIUM
Qualcomm AQT1000 Firmware - Information Disclosure via Shared Memory Read
CVSS 6.1
CVE-2023-28553 MEDIUM
Qualcomm WLAN Host - Information Disclosure
CVSS 6.1
CVE-2023-36581 HIGH
Windows 10/11 and Windows Server 2008/2012/2016/2019 - Denial of Service in MSMQ
CVSS 7.5
CVE-2023-33027 HIGH
Qualcomm WLAN Firmware - Denial of Service via RSN IE Parsing
CVSS 7.5
CVE-2023-33026 HIGH
Qualcomm WLAN Firmware - Denial of Service via NAN Management Frame Parsing
CVSS 7.5
CVE-2023-28571 MEDIUM
Qualcomm WLAN HOST - Information Disclosure
CVSS 6.1
CVE-2023-24849 HIGH
Qualcomm Modem Firmware - Information Disclosure via FMTP Parsing
CVSS 8.2
CVE-2023-24848 HIGH
Qualcomm 315 5G IoT Modem Firmware - Information Disclosure via VoLTE RTCP FB Line
CVSS 8.2
CVE-2023-22385 HIGH
Qualcomm 315 5G IoT Modem Firmware - Memory Corruption via MO or MT VoLTE Call
CVSS 8.2
Details
Vulnerabilities 449