cve.bz

CWE-126: Buffer Over-read, page 10

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-35330EPSS 1.9%

    Windows Extended Negotiation Denial of Service Vulnerability

  2. 5.5CVE-2023-35324EPSS 0.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  3. 7.5CVE-2023-33173EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  4. 7.5CVE-2023-33172EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  5. 7.5CVE-2023-33169EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  6. 7.5CVE-2023-33168EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  7. 7.5CVE-2023-33167EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  8. 7.5CVE-2023-33166EPSS 1.6%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  9. 5.5CVE-2023-32085EPSS 0.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  10. 7.5CVE-2023-23571EPSS 1.1%

    An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.

  11. 7.8CVE-2023-28542EPSS 0.1%

    Memory Corruption in WLAN HOST while fetching TX status information.

  12. 7.8CVE-2023-28541EPSS 0.1%

    Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

  13. 7.5CVE-2023-21669EPSS 0.4%

    Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

  14. 7.5CVE-2023-21661EPSS 0.4%

    Transient DOS while parsing WLAN beacon or probe-response frame.

  15. 7.5CVE-2023-21660EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing FT Information Elements.

  16. 7.5CVE-2023-21659EPSS 0.4%

    Transient DOS in WLAN Firmware while processing frames with missing header fields.

  17. 7.5CVE-2023-21658EPSS 0.4%

    Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

  18. 7.5CVE-2023-24942EPSS 1.9%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  19. 7.5CVE-2023-24901EPSS 1.6%

    Windows NFS Portmapper Information Disclosure Vulnerability

  20. 5.5CVE-2022-33273EPSS 0.1%

    Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

  21. 7.5CVE-2022-40505EPSS 0.4%

    Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

  22. 7.5CVE-2022-40503EPSS 0.4%

    Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

  23. 5.5CVE-2022-33297EPSS 0.1%

    Information disclosure due to buffer overread in Linux sensors

  24. 7.5CVE-2022-33295EPSS 0.4%

    Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

  25. 7.5CVE-2022-33291EPSS 0.4%

    Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

  26. 7.5CVE-2022-33287EPSS 0.4%

    Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

  27. 7.5CVE-2022-33258EPSS 0.4%

    Information disclosure due to buffer over-read in modem while reading configuration parameters.

  28. 7.5CVE-2022-33228EPSS 0.4%

    Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

  29. 7.5CVE-2022-33222EPSS 0.4%

    Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

  30. 7.5CVE-2022-25747EPSS 0.4%

    Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

  31. 7.5CVE-2022-25730EPSS 0.4%

    Information disclosure in modem due to improper check of IP type while processing DNS server query

  32. 7.5CVE-2022-25726EPSS 0.4%

    Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

  33. 7.5CVE-2023-24513EPSS 0.7%

    On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough …

  34. 6.5CVE-2023-28267EPSS 2.1%

    Remote Desktop Protocol Client Information Disclosure Vulnerability

  35. 5.5CVE-2023-28266EPSS 4.4%

    Windows Common Log File System Driver Information Disclosure Vulnerability

  36. 6.5CVE-2023-24883EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  37. 6.5CVE-2023-20112EPSS 0.3%

    A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain param…

  38. 6.5CVE-2023-24870EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  39. 7.5CVE-2023-24858EPSS 1.4%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  40. 6.5CVE-2023-24857EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  41. 7.5CVE-2022-40535EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while sending a packet to device.

  42. 7.5CVE-2022-33309EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

  43. 7.4CVE-2023-21820EPSS 0.6%

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

  44. 7.5CVE-2023-21813EPSS 1.7%

    Windows Secure Channel Denial of Service Vulnerability

  45. 7.5CVE-2023-21811EPSS 1.7%

    Windows iSCSI Service Denial of Service Vulnerability

  46. 5.3CVE-2023-21720EPSS 1.2%

    Microsoft Edge (Chromium-based) Tampering Vulnerability

  47. 7.5CVE-2023-21701EPSS 1.7%

    Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

  48. 5.5CVE-2023-21697EPSS 0.5%

    Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

  49. 7.8CVE-2023-0817EPSS 0.4%

    Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.

  50. 7.5CVE-2022-40512EPSS 0.4%

    Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.