CWE-126: Buffer Over-read, page 6
Filter
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
What the weakness is: CWE-126 at MITRE
Ask an AI about CWE-126
Show the prompt
Explain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2025-21463EPSS 0.2%
Transient DOS while processing the EHT operation IE in the received beacon frame.
- 8.2CVE-2024-53026EPSS 0.3%
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
- 8.2CVE-2024-53021EPSS 0.3%
Information disclosure may occur while processing goodbye RTCP packet from network.
- 8.2CVE-2024-53020EPSS 0.3%
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
- 8.2CVE-2024-53019EPSS 0.3%
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
- 3.7CVE-2025-47295EPSS 0.8%
A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, unde…
- 7.5CVE-2024-52879EPSS 0.5%
An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 …
- 7.5CVE-2024-52878EPSS 0.5%
An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 …
- 7.5CVE-2024-52877EPSS 0.5%
An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 …
- 7.8CVE-2025-32704EPSS 0.4%
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 5.4CVE-2025-29956EPSS 1.1%
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
- 5.9CVE-2025-4207EPSS 0.8%
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and …
- 7.8CVE-2025-21475EPSS 0.1%
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
- 7.5CVE-2025-21459EPSS 0.4%
Transient DOS while parsing per STA profile in ML IE.
- 7.5CVE-2024-49847EPSS 0.3%
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
- 9.1CVE-2024-49846EPSS 0.3%
Memory corruption while decoding of OTA messages from T3448 IE.
- 7.8CVE-2024-45568EPSS 0.1%
Memory corruption due to improper bounds check while command handling in camera-kernel driver.
- 6.5CVE-2025-26676EPSS 1.7%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-26672EPSS 1.9%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-26664EPSS 1.9%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-21203EPSS 1.7%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2025-21448EPSS 0.3%
Transient DOS may occur while parsing SSID in action frames.
- 7.5CVE-2025-21435EPSS 0.3%
Transient DOS may occur while parsing extended IE in beacon.
- 7.5CVE-2025-21434EPSS 0.3%
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
- 7.5CVE-2025-21430EPSS 0.3%
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
- 7.5CVE-2025-21429EPSS 0.3%
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
- 7.5CVE-2025-21428EPSS 0.3%
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
- 7.8CVE-2025-21421EPSS 0.1%
Memory corruption while processing escape code in API.
- 8.2CVE-2024-45552EPSS 0.3%
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
- 6.5CVE-2025-32053EPSS 0.7%
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
- 6.5CVE-2025-32052EPSS 0.7%
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
- 5.5CVE-2025-24992EPSS 1.1%
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- 1.0CVE-2024-12975EPSS 0.2%
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.
- 6.5CVE-2024-43056EPSS 0.1%
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
- 4.0CVE-2024-57970EPSS 0.2%
libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.
- 7.6CVE-2024-12011EPSS 0.4%
A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated atta…
- 9.8CVE-2024-49839EPSS 0.3%
Memory corruption during management frame processing due to mismatch in T2LM info element.
- 7.5CVE-2024-49838EPSS 0.3%
Information disclosure while parsing the OCI IE with invalid length.
- 7.8CVE-2024-45561EPSS 0.1%
Memory corruption while handling IOCTL call from user-space to set latency level.
- 5.5CVE-2024-38417EPSS 0.1%
Information disclosure while processing IO control commands.
- 5.5CVE-2024-38416EPSS 0.1%
Information disclosure during audio playback.
- 5.5CVE-2024-38414EPSS 0.1%
Information disclosure while processing information on firmware image during core initialization.
- 7.5CVE-2024-38404EPSS 0.3%
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
- 7.5CVE-2025-21277EPSS 39%
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- 7.8CVE-2025-21271EPSS 0.5%
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- 8.8CVE-2025-21176EPSS 2.4%
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
- 5.5CVE-2024-45559EPSS 0.1%
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
- 7.5CVE-2024-45558EPSS 0.4%
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
- 7.8CVE-2024-45548EPSS 0.09%
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
- 7.8CVE-2024-45546EPSS 0.09%
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.