cve.bz

CWE-126: Buffer Over-read, page 11

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2022-34145EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

  2. 7.5CVE-2022-33306EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

  3. 7.5CVE-2022-33271EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

  4. 7.5CVE-2022-33229EPSS 0.4%

    Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

  5. 5.5CVE-2022-33221EPSS 0.1%

    Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

  6. 7.5CVE-2022-25738EPSS 0.4%

    Information disclosure in modem due to buffer over-red while performing checksum of packet received

  7. 7.5CVE-2022-25732EPSS 0.4%

    Information disclosure in modem due to buffer over read in dns client due to missing length check

  8. 7.5CVE-2022-25728EPSS 0.4%

    Information disclosure in modem due to buffer over-read while processing response from DNS server

  9. 6.8CVE-2023-0396EPSS 0.4%

    A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses.

  10. 4.4CVE-2022-4435EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

  11. 4.4CVE-2022-4434EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.

  12. 4.4CVE-2022-4433EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

  13. 4.4CVE-2022-4432EPSS 0.2%

    A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

  14. 5.5CVE-2022-44446EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  15. 5.5CVE-2022-44445EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  16. 5.5CVE-2022-44443EPSS 0.1%

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

  17. 5.5CVE-2022-42781EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  18. 5.5CVE-2022-42780EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  19. 5.5CVE-2022-42779EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  20. 5.5CVE-2022-42774EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  21. 4.3CVE-2022-42768EPSS 0.4%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  22. 5.5CVE-2022-42762EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  23. 5.5CVE-2022-42759EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  24. 3.3CVE-2022-42758EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  25. 3.3CVE-2022-42757EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  26. 5.5CVE-2022-39132EPSS 0.1%

    In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  27. 5.5CVE-2022-39130EPSS 0.1%

    In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  28. 5.5CVE-2022-38673EPSS 0.09%

    In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  29. 5.5CVE-2022-38671EPSS 0.1%

    In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  30. 7.8CVE-2022-3178EPSS 0.4%

    Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.

  31. 8.6CVE-2022-20823EPSS 1.1%

    A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete inpu…

  32. 7.8CVE-2020-35511EPSS 0.4%

    A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.

  33. 5.5CVE-2022-2301EPSS 0.7%

    Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.

  34. 6.5CVE-2022-32141EPSS 1.0%

    Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interact…

  35. 7.8CVE-2022-2175EPSS 1.3%

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.

  36. 7.8CVE-2022-1720EPSS 2.2%

    Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

  37. 7.8CVE-2022-2124EPSS 1.6%

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.

  38. 8.1CVE-2022-1987EPSS 0.8%

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

  39. 7.8CVE-2022-1927EPSS 1.7%

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.

  40. 8.1CVE-2022-1908EPSS 0.7%

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

  41. 8.1CVE-2022-1907EPSS 0.7%

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

  42. 7.8CVE-2022-1769EPSS 0.4%

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

  43. 7.8CVE-2022-1629EPSS 1.9%

    Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution

  44. 7.1CVE-2022-1534EPSS 0.3%

    Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information fr…

  45. 7.8CVE-2022-1533EPSS 0.4%

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.

  46. 8.6CVE-2022-20714EPSS 1.3%

    A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card to reset. This vulnerability is due to …

  47. 7.5CVE-2022-22519EPSS 1.7%

    A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

  48. 5.5CVE-2022-23130EPSS 1.0%

    Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi …

  49. 4.4CVE-2021-22563EPSS 0.3%

    Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is rec…

  50. 9.1CVE-2021-34584EPSS 1.1%

    Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.