CWE-126

Buffer Over-read

Parent: CWE-125 - Out-of-bounds Read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

449 vulnerabilities with CWE-126
CVE-2021-34303 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in Tiff_Loader.dll
CVSS 5.5
CVE-2021-34302 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in BMP_Loader.dll
CVSS 5.5
CVE-2021-34299 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0 - Out-of-bounds Read in TIFF Parser
CVSS 5.5
CVE-2021-1373 HIGH
Cisco IOS XE Wireless Controller Software - Unauthenticated Denial of Service via CAPWAP Packet Processing
CVSS 8.6
CVE-2020-35511 HIGH
pngcheck 2.4.0 - Global Buffer Overflow via Crafted PNG File
CVSS 7.8
CVE-2020-25853 HIGH
Realtek RTL8195A Firmware < 2.08 - Denial of Service via WPA2 Handshake Packet Injection
CVSS 7.5
CVE-2020-3399 HIGH
Cisco IOS XE - Unauthenticated Denial of Service via CAPWAP Packet Processing
CVSS 8.6
CVE-2020-8244 MEDIUM
bufferlist <1.2.3 - Out-of-bounds Read via Negative consume() Argument
CVSS 6.5
CVE-2019-1010220 LOW
tcpdump.org tcpdump <4.9.2 - Buffer Over-read
CVSS 3.3
CVE-2019-5432 HIGH
mqtt-packet <3.5.1-6.1.2 - Buffer Overflow
CVSS 7.5
CVE-2019-11036 CRITICAL
PHP 7.1.x < 7.1.29, 7.2.x < 7.2.18, 7.3.x < 7.3.5 - Out-of-bounds Read in EXIF Extension
CVSS 9.1
CVE-2019-3563 CRITICAL
Wangle < 2019.04.22.00 - Buffer Over-read in LineBasedFrameDecoder
CVSS 9.8
CVE-2018-5852 HIGH
Qualcomm MDM9206-MDM9650, MSM8909W, SD 210-845 Firmware - Buffer Over-read via IPA Driver NAT Entry Debugfs Command
CVSS 8.4
CVE-2018-8799 HIGH
rdesktop <= 1.8.3 - Denial of Service via Out-of-Bounds Read in process_secondary_order()
CVSS 7.5
CVE-2018-8798 HIGH
rdesktop <= 1.8.3 - Out-of-Bounds Read in rdpsnd_process_ping()
CVSS 7.5
CVE-2018-8796 HIGH
rdesktop <= 1.8.3 - Denial of Service via Out-of-Bounds Read in process_bitmap_updates()
CVSS 7.5
CVE-2018-8792 HIGH
rdesktop <= 1.8.3 - Denial of Service via Out-of-Bounds Read in cssp_read_tsrequest()
CVSS 7.5
CVE-2018-8791 HIGH
rdesktop <= 1.8.3 - Out-of-Bounds Read in rdpdr_process()
CVSS 7.5
CVE-2018-8789 HIGH
FreeRDP < 2.0.0-rc4 - Denial of Service via NTLM Authentication Module
CVSS 7.5
CVE-2018-14790 CRITICAL
Fuji Electric FRENIC LOADER v3.3-7.3.4.1a - RCE
CVSS 9.8
CVE-2017-17772 CRITICAL
Qualcomm SD 450/625/820/820A/835/845/850 Firmware - Out-of-bounds Read in 802.11 Frame Processing
CVSS 9.8
CVE-2017-7679 CRITICAL
Apache httpd <2.2.33, <2.4.26 - Buffer Overflow
CVSS 9.8
CVE-2017-7668 HIGH
Apache HTTP Server 2.2.32-2.4.24 - Out-of-bounds Read via Token List Parsing
CVSS 7.5
CVE-2009-2495 MEDIUM
Microsoft Visual Studio .NET 2003-2008 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities 449