CWE-126

Buffer Over-read

Parent: CWE-125 - Out-of-bounds Read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

449 vulnerabilities with CWE-126
CVE-2023-38152 MEDIUM
Windows Server 2008, 2012, 2016, 2019, 2022 - Information Disclosure via DHCP Server Service Buffer Over-read
CVSS 5.3
CVE-2023-38144 HIGH
Windows Common Log File System Driver - Elevation of Privilege via Buffer Over-read
CVSS 7.8
CVE-2023-36803 MEDIUM
Windows 10/11, Server 2016/2019/2022 - Kernel Out-of-bounds Read Information Disclosure
CVSS 5.5
CVE-2023-36801 MEDIUM
Windows Server 2008, 2012, 2016, 2019, 2022 - Information Disclosure via DHCP Server Service Buffer Over-read
CVSS 5.3
CVE-2023-36773 HIGH
3D Builder < 20.0.4.0 - Remote Code Execution
CVSS 7.8
CVE-2023-33016 HIGH
Qualcomm WLAN Firmware - Denial of Service via MLO Parsing
CVSS 7.5
CVE-2023-33015 HIGH
Qualcomm WLAN Firmware - Denial of Service via MBSSID IE Beacon Frame Parsing
CVSS 7.5
CVE-2023-21667 MEDIUM
Qualcomm Bluetooth HOST - Denial of Service
CVSS 6.5
CVE-2023-4758 MEDIUM
gpac < 2.3 - Buffer Over-read
CVSS 5.5
CVE-2023-38172 HIGH
Microsoft Windows and Windows Server - Denial of Service via MSMQ Buffer Over-read
CVSS 7.5
CVE-2023-36904 HIGH
Windows Cloud Files Mini Filter Driver - Privilege Escalation
CVSS 7.8
CVE-2023-28555 HIGH
Qualcomm Media Codec Audio Channel Remapping Firmware - Denial of Service
CVSS 7.5
CVE-2023-21625 HIGH
Qualcomm DNS Response Buffer Over-read Firmware - Information Disclosure
CVSS 8.2
CVE-2023-3649 MEDIUM
Wireshark 4.0.0-4.0.6 - Denial of Service via iSCSI Dissector Crash
CVSS 5.3
CVE-2023-35330 HIGH
Windows 10 1507-22H2 and Windows 11 21H2-22H2 - Denial of Service via Extended Negotiation
CVSS 7.5
CVE-2023-35324 MEDIUM
Windows PostScript and PCL6 Class Printer Driver - Information Disclosure via Buffer Over-read
CVSS 5.5
CVE-2023-33173 MEDIUM
Microsoft Windows RPC Runtime - Denial of Service
CVSS 6.5
CVE-2023-33172 MEDIUM
Microsoft Windows RPC Runtime - Denial of Service
CVSS 6.5
CVE-2023-33169 MEDIUM
Microsoft Windows RPC Runtime - Denial of Service
CVSS 6.5
CVE-2023-33168 MEDIUM
Microsoft Windows RPC Runtime - Denial of Service
CVSS 6.5
CVE-2023-33167 MEDIUM
Microsoft Windows RPC Runtime - Denial of Service
CVSS 6.5
CVE-2023-33166 MEDIUM
Microsoft Windows RPC Runtime - Denial of Service
CVSS 6.5
CVE-2023-32085 MEDIUM
Microsoft Windows PostScript and PCL6 Class Printer Driver - Information Disclosure via Buffer Over-read
CVSS 5.5
CVE-2023-23571 HIGH
Milesight UR32L v32.3.0.5 - Denial of Service via Eventcore Network Request
CVSS 7.5
CVE-2023-28542 HIGH
Qualcomm 315 5G IoT Firmware - Memory Corruption in WLAN HOST TX Status Fetch
CVSS 7.8
Details
Vulnerabilities 449