cve.bz

CWE-126: Buffer Over-read, page 7

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2024-43063EPSS 0.1%

    information disclosure while invoking the mailbox read API.

  2. 5.5CVE-2024-33067EPSS 0.1%

    Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

  3. 5.5CVE-2024-33061EPSS 0.1%

    Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.

  4. 5.5CVE-2024-23366EPSS 0.1%

    Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

  5. 7.8CVE-2024-49088EPSS 1.0%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  6. 7.8CVE-2024-33056EPSS 0.1%

    Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

  7. 6.1CVE-2024-33037EPSS 0.1%

    Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

  8. 2.7CVE-2024-42333EPSS 0.6%

    The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

  9. 7.8CVE-2018-5852EPSS 0.1%

    An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

  10. 9.8CVE-2017-17772EPSS 0.4%

    In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

  11. 5.5CVE-2024-11596EPSS 0.3%

    ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

  12. 7.8CVE-2024-49031EPSS 0.8%

    Microsoft Office Graphics Remote Code Execution Vulnerability

  13. 5.5CVE-2024-9843EPSS 0.3%

    A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.

  14. 6.5CVE-2024-38405EPSS 0.3%

    Transient DOS while processing the CU information from RNR IE.

  15. 6.5CVE-2024-38403EPSS 0.3%

    Transient DOS while parsing BTM ML IE when per STA profile is not included.

  16. 8.8CVE-2024-43595EPSS 1.0%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  17. 5.5CVE-2024-43500EPSS 0.6%

    Windows Resilient File System (ReFS) Information Disclosure Vulnerability

  18. 8.8CVE-2024-38265EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  19. 7.8CVE-2024-38261EPSS 0.9%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  20. 7.5CVE-2024-38397EPSS 0.3%

    Transient DOS while parsing probe response and assoc response frame.

  21. 8.2CVE-2024-33073EPSS 0.3%

    Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

  22. 7.5CVE-2024-33071EPSS 0.3%

    Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.

  23. 7.5CVE-2024-33070EPSS 0.3%

    Transient DOS while parsing ESP IE from beacon/probe response frame.

  24. 8.2CVE-2024-33064EPSS 0.4%

    Information disclosure while parsing the multiple MBSSID IEs from the beacon.

  25. 7.5CVE-2024-33049EPSS 0.3%

    Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.

  26. 7.5CVE-2024-9029EPSS 0.5%

    A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, cau…

  27. 7.3CVE-2024-43475EPSS 1.8%

    Microsoft Windows Admin Center Information Disclosure Vulnerability

  28. 7.8CVE-2024-38250EPSS 0.7%

    Windows Graphics Component Elevation of Privilege Vulnerability

  29. 7.5CVE-2024-33057EPSS 0.3%

    Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.

  30. 7.5CVE-2024-33051EPSS 0.3%

    Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

  31. 7.5CVE-2024-33050EPSS 0.3%

    Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

  32. 7.5CVE-2024-33048EPSS 0.3%

    Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.

  33. 7.8CVE-2024-33047EPSS 0.1%

    Memory corruption when the captureRead QDCM command is invoked from user-space.

  34. 5.5CVE-2024-33043EPSS 0.09%

    Transient DOS while handling PS event when Program Service name length offset value is set to 255.

  35. 7.5CVE-2024-23364EPSS 0.3%

    Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).

  36. 8.2CVE-2024-23359EPSS 0.3%

    Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

  37. 7.5CVE-2024-23358EPSS 0.3%

    Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

  38. 5.7CVE-2024-7347EPSS 0.3%

    NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX…

  39. 7.8CVE-2024-38135EPSS 0.7%

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  40. 7.8CVE-2024-38127EPSS 1.6%

    Windows Hyper-V Elevation of Privilege Vulnerability

  41. 7.5CVE-2024-33026EPSS 0.3%

    Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.

  42. 7.5CVE-2024-33025EPSS 0.3%

    Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

  43. 7.5CVE-2024-33020EPSS 0.3%

    Transient DOS while processing TID-to-link mapping IE elements.

  44. 7.5CVE-2024-33019EPSS 0.3%

    Transient DOS while parsing the received TID-to-link mapping action frame.

  45. 7.5CVE-2024-33018EPSS 0.3%

    Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.

  46. 7.5CVE-2024-33015EPSS 0.3%

    Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.

  47. 7.5CVE-2024-33014EPSS 0.3%

    Transient DOS while parsing ESP IE from beacon/probe response frame.

  48. 7.5CVE-2024-33013EPSS 0.3%

    Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.

  49. 7.5CVE-2024-33012EPSS 0.3%

    Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

  50. 7.5CVE-2024-33011EPSS 0.3%

    Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.