CWE-126

Buffer Over-read

Parent: CWE-125 - Out-of-bounds Read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

449 vulnerabilities with CWE-126
CVE-2022-1720 HIGH
vim < 8.2.4956 - Out-of-bounds Read in grab_file_name
CVSS 7.8
CVE-2022-2124 HIGH
vim < 8.2.5120 - Out-of-bounds Read
CVSS 7.8
CVE-2022-1987 HIGH
bfabiszewski/libmobi <0.11 - Buffer Overflow
CVSS 8.1
CVE-2022-1927 HIGH
vim < 8.2.5037 - Out-of-bounds Read
CVSS 7.8
CVE-2022-1908 HIGH
bfabiszewski/libmobi <0.11 - Buffer Overflow
CVSS 8.1
CVE-2022-1907 HIGH
bfabiszewski/libmobi <0.11 - Buffer Overflow
CVSS 8.1
CVE-2022-1769 HIGH
vim < 8.2.4974 - Out-of-bounds Read
CVSS 7.8
CVE-2022-1629 HIGH
vim < 8.2.4925 - Out-of-bounds Read in find_next_quote
CVSS 7.8
CVE-2022-1534 HIGH
libmobi < 0.11 - Out-of-bounds Read in parse_rawml.c
CVSS 7.1
CVE-2022-1533 HIGH
libmobi < 0.11 - Out-of-bounds Read
CVSS 7.8
CVE-2022-20714 HIGH
Cisco IOS XR - Unauthenticated Denial of Service via Malformed Packet Handling in Lightspeed-Plus Line Cards
CVSS 8.6
CVE-2022-22519 HIGH
CODESYS Control Runtime System < 4.5.0.0 - Unauthenticated Denial of Service via HTTP Request Buffer Over-Read
CVSS 7.5
CVE-2022-23130 MEDIUM
Mitsubishi Electric GENESIS64 <= 10.97 - Denial of Service via Crafted Configuration File Import
CVSS 5.9
CVE-2021-22563 MEDIUM
libjxl < 0.6.0 - Out-of-bounds Read via Spline Rendering
CVSS 4.5
CVE-2021-34584 CRITICAL
WAGO 750 Series Firmware - Buffer Over-read and Denial of Service via Crafted Web Server Requests
CVSS 9.1
CVE-2021-1588 HIGH
Cisco NX-OS - Unauthenticated Denial of Service via MPLS OAM Echo Packet Processing
CVSS 8.6
CVE-2021-22552 MEDIUM
Asylo < 0.6.1 - Unauthenticated Out-of-bounds Read via MessageReader Syscall Validation Bypass
CVSS 5.3
CVE-2021-1614 MEDIUM
Cisco SD-WAN 18.4.0-18.4.5 - Unauthenticated Information Disclosure via MPLS Packet Handling
CVSS 5.3
CVE-2021-34325 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in Jt981.dll
CVSS 5.5
CVE-2021-34322 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in JPEG2K_Loader.dll
CVSS 5.5
CVE-2021-34321 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in VisDraw.dll J2K Parser
CVSS 5.5
CVE-2021-34320 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in Jt981.dll
CVSS 5.5
CVE-2021-34308 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in BMP_Loader.dll
CVSS 5.5
CVE-2021-34307 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in TIFF Parser
CVSS 5.5
CVE-2021-34304 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in TIFF Parser
CVSS 5.5
Details
Vulnerabilities 449