cve.bz

CWE-126: Buffer Over-read, page 2

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 3.7CVE-2026-97399EPSS 0.3%

    The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the…

  2. 7.1CVE-2026-94286EPSS 0.2%

    An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.

  3. 7.5CVE-2026-86243EPSS 0.6%

    Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Ear…

  4. 7.4CVE-2026-25294EPSS 0.2%

    Transient DOS while parsing frame during channel usage.

  5. 7.3CVE-2026-25284EPSS 0.10%

    Information Disclosure when a pointer is reused after being deallocated.

  6. 7.5CVE-2026-25275EPSS 0.3%

    Transient DOS when processing authentication frames with invalid FILS information element header lengths.

  7. 7.4CVE-2026-24081EPSS 0.2%

    Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

  8. 7.0CVE-2026-24075EPSS 0.09%

    Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

  9. 1.9CVE-2026-90610EPSS 0.2%

    A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only p…

  10. 5.3CVE-2026-76653EPSS 0.5%

    A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modif…

  11. 5.5CVE-2026-83951EPSS 0.5%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  12. 5.5CVE-2026-83949EPSS 0.5%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  13. 5.5CVE-2026-81399EPSS 0.5%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  14. 4.3CVE-2026-78516EPSS 0.5%

    Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

  15. 6.5CVE-2026-73029EPSS 1.0%

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  16. 6.5CVE-2026-72974EPSS 0.9%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  17. 7.5CVE-2026-72932EPSS 1.0%

    Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

  18. 5.5CVE-2026-69794EPSS 0.4%

    Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

  19. 6.5CVE-2026-69719EPSS 0.9%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  20. 6.5CVE-2026-69626EPSS 0.9%

    Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  21. 7.0CVE-2026-69610EPSS 0.3%

    Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-69582EPSS 0.3%

    Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

  23. 4.8CVE-2026-69474EPSS 0.7%

    Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

  24. 5.7CVE-2026-69416EPSS 0.6%

    Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

  25. 4.7CVE-2026-69316EPSS 0.3%

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

  26. 7.8CVE-2026-68875EPSS 0.3%

    Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

  27. 5.5CVE-2026-68851EPSS 0.4%

    Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

  28. 6.5CVE-2026-67393EPSS 1.0%

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  29. 6.5CVE-2026-67390EPSS 1.0%

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  30. 5.0CVE-2026-18238EPSS 0.2%

    The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process m…

  31. 7.5CVE-2026-84640EPSS 0.3%

    A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  32. 2.0CVE-2026-70652EPSS 0.1%

    libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vips_foreign_save_uhdr_set_raw_hdr…

  33. 7.5CVE-2026-53587EPSS 0.5%

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in s…

  34. 6.5CVE-2026-76885EPSS 0.2%

    Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  35. 6.5CVE-2026-76884EPSS 0.2%

    ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  36. 6.5CVE-2026-69550EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  37. 5.3CVE-2026-65936EPSS 0.3%

    A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.  See vulnerability B-E4 in the related paper below.

  38. 5.3CVE-2026-65933EPSS 0.3%

    A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.

  39. 4.3CVE-2026-18024EPSS 0.3%

    Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance …

  40. 4.3CVE-2026-14678EPSS 0.3%

    Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL …

  41. 7.5CVE-2026-68819EPSS 1.0%

    Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.

  42. 6.5CVE-2026-65794EPSS 0.9%

    Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

  43. 7.8CVE-2026-64905EPSS 0.5%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  44. 5.5CVE-2026-62793EPSS 0.4%

    Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

  45. 5.5CVE-2026-62746EPSS 0.4%

    Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

  46. 5.5CVE-2026-62730EPSS 0.4%

    Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.

  47. 4.6CVE-2026-61350EPSS 0.5%

    Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

  48. 5.5CVE-2026-61347EPSS 0.4%

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  49. 6.5CVE-2026-53414EPSS 0.4%

    Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.

  50. 6.3CVE-2026-20311EPSS 0.3%

    A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is d…