cve.bz

CWE-126: Buffer Over-read, page 5

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.9CVE-2025-55093EPSS 0.3%

    In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes o…

  2. 6.9CVE-2025-55092EPSS 0.3%

    In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option.

  3. 6.9CVE-2025-55091EPSS 0.4%

    In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data.

  4. 6.9CVE-2025-55090EPSS 0.4%

    In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() function when received an Ethernet frame with less than 4 bytes of IP packet.

  5. 6.9CVE-2025-55084EPSS 0.3%

    In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field.

  6. 6.9CVE-2025-55083EPSS 0.3%

    In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.

  7. 6.9CVE-2025-55081EPSS 0.4%

    In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method l…

  8. 7.8CVE-2025-59192EPSS 0.3%

    Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

  9. 5.5CVE-2025-55325EPSS 0.5%

    Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

  10. 5.3CVE-2025-11617EPSS 0.3%

    A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IP…

  11. 5.3CVE-2025-11616EPSS 0.3%

    A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect app…

  12. 5.5CVE-2025-27049EPSS 0.08%

    Transient DOS while processing IOCTL call for image encoding.

  13. 6.1CVE-2025-27045EPSS 0.10%

    Information disclosure while processing batch command execution in Video driver.

  14. 5.5CVE-2025-27041EPSS 0.08%

    Transient DOS while processing video packets received from video firmware.

  15. 5.1CVE-2025-59933EPSS 0.2%

    libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when pa…

  16. 7.5CVE-2025-47328EPSS 0.2%

    Transient DOS while processing power control requests with invalid antenna or stream values.

  17. 7.5CVE-2025-47326EPSS 0.2%

    Transient DOS while handling command data during power control processing.

  18. 7.5CVE-2025-47318EPSS 0.2%

    Transient DOS while parsing the EPTM test control message to get the test pattern.

  19. 7.8CVE-2025-47317EPSS 0.09%

    Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

  20. 6.1CVE-2025-27036EPSS 0.09%

    Information disclosure when Video engine escape input data is less than expected minimum size.

  21. 6.1CVE-2025-27033EPSS 0.09%

    Information disclosure while running video usecase having rogue firmware.

  22. 6.1CVE-2025-27030EPSS 0.09%

    information disclosure while invoking calibration data from user space to update firmware size.

  23. 8.2CVE-2025-21488EPSS 0.3%

    Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

  24. 8.2CVE-2025-21487EPSS 0.3%

    Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

  25. 8.2CVE-2025-21484EPSS 0.3%

    Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

  26. 4.8CVE-2025-4582EPSS 0.1%

    Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1…

  27. 5.5CVE-2025-54901EPSS 0.6%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  28. 6.5CVE-2025-53806EPSS 1.2%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  29. 6.5CVE-2025-53798EPSS 1.2%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  30. 6.5CVE-2025-53797EPSS 1.2%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  31. 6.5CVE-2025-53796EPSS 1.2%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  32. 8.8CVE-2025-36855EPSS 0.8%

    A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product read…

  33. 6.2CVE-2025-53736EPSS 0.5%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  34. 7.8CVE-2025-27068EPSS 0.1%

    Memory corruption while processing an IOCTL command with an arbitrary address.

  35. 7.5CVE-2025-27065EPSS 0.3%

    Transient DOS while processing a frame with malformed shared-key descriptor.

  36. 6.1CVE-2025-21457EPSS 0.10%

    Information disclosure while opening a fastrpc session when domain is not sanitized.

  37. 3.3CVE-2023-53159EPSS 0.2%

    The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

  38. 6.9CVE-2025-7745EPSS 0.5%

    Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2.

  39. 5.5CVE-2025-49684EPSS 0.5%

    Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.

  40. 7.8CVE-2025-49659EPSS 0.4%

    Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2025-47973EPSS 0.5%

    Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  42. 7.8CVE-2025-47971EPSS 0.5%

    Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  43. 7.5CVE-2025-27057EPSS 0.2%

    Transient DOS while handling beacon frames with invalid IE header length.

  44. 7.8CVE-2025-27055EPSS 0.1%

    Memory corruption during the image encoding process.

  45. 7.5CVE-2025-21454EPSS 0.2%

    Transient DOS while processing received beacon frame.

  46. 7.5CVE-2025-21449EPSS 0.2%

    Transient DOS may occur while processing malformed length field in SSID IEs.

  47. 7.5CVE-2025-21446EPSS 0.2%

    Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

  48. 8.2CVE-2025-21427EPSS 0.2%

    Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

  49. 5.5CVE-2025-24068EPSS 0.6%

    Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

  50. 7.5CVE-2025-27029EPSS 0.3%

    Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.