cve.bz

CWE-126: Buffer Over-read, page 8

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-23353EPSS 0.3%

    Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

  2. 7.5CVE-2024-21479EPSS 0.3%

    Transient DOS during music playback of ALAC content.

  3. 7.5CVE-2024-21467EPSS 0.3%

    Information disclosure while handling beacon probe frame during scan entry generation in client side.

  4. 7.5CVE-2024-21459EPSS 0.3%

    Information disclosure while handling beacon or probe response frame in STA.

  5. 7.5CVE-2024-38071EPSS 36%

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

  6. 7.8CVE-2024-30079EPSS 0.7%

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

  7. 4.7CVE-2024-30071EPSS 0.6%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  8. 7.8CVE-2024-21465EPSS 0.1%

    Memory corruption while processing key blob passed by the user.

  9. 5.5CVE-2024-21462EPSS 0.09%

    Transient DOS while loading the TA ELF file.

  10. 7.5CVE-2024-21458EPSS 0.2%

    Information disclosure while handling SA query action frame.

  11. 7.5CVE-2024-21457EPSS 0.2%

    INformation disclosure while handling Multi-link IE in beacon frame.

  12. 9.1CVE-2024-21456EPSS 0.3%

    Information Disclosure while parsing beacon frame in STA.

  13. 8.1CVE-2024-38373EPSS 0.6%

    FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS r…

  14. 4.7CVE-2024-30069EPSS 0.6%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  15. 7.5CVE-2024-23363EPSS 0.3%

    Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

  16. 7.5CVE-2023-43555EPSS 0.2%

    Information disclosure in Video while parsing mp2 clip with invalid section length.

  17. 7.5CVE-2023-43537EPSS 0.2%

    Information disclosure while handling T2LM Action Frame in WLAN Host.

  18. 5.5CVE-2024-30039EPSS 0.7%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  19. 7.5CVE-2024-21477EPSS 0.3%

    Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

  20. 5.5CVE-2023-43528EPSS 0.1%

    Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

  21. 5.5CVE-2023-43527EPSS 0.1%

    Information disclosure while parsing dts header atom in Video.

  22. 5.5CVE-2024-28902EPSS 0.8%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  23. 5.5CVE-2024-28901EPSS 0.7%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  24. 5.5CVE-2024-28900EPSS 0.7%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  25. 5.5CVE-2024-26255EPSS 0.8%

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

  26. 7.0CVE-2024-26243EPSS 0.4%

    Windows USB Print Driver Elevation of Privilege Vulnerability

  27. 7.3CVE-2024-31082EPSS 0.3%

    A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation …

  28. 7.3CVE-2024-31081EPSS 0.5%

    A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation f…

  29. 7.3CVE-2024-31080EPSS 0.5%

    A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation f…

  30. 7.8CVE-2023-33115EPSS 0.1%

    Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

  31. 6.5CVE-2024-3077EPSS 0.5%

    An malicious BLE device can crash BLE victim device by sending malformed gatt packet

  32. 5.3CVE-2023-45919EPSS 0.4%

    Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

  33. 7.8CVE-2024-26176EPSS 0.8%

    Windows Kernel Elevation of Privilege Vulnerability

  34. 5.5CVE-2024-26160EPSS 11%

    Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

  35. 7.5CVE-2023-43539EPSS 0.3%

    Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

  36. 5.5CVE-2023-33090EPSS 0.10%

    Transient DOS while processing channel information for speaker protection v2 module in ADSP.

  37. 5.5CVE-2023-33078EPSS 0.1%

    Information Disclosure while processing IOCTL request in FastRPC.

  38. 9.1CVE-2023-51773EPSS 1.1%

    BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.

  39. 9.1CVE-2023-6936EPSS 0.6%

    In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for de…

  40. 5.9CVE-2023-39541EPSS 0.8%

    A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

  41. 5.9CVE-2023-39540EPSS 0.8%

    A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

  42. 4.6CVE-2024-21340EPSS 0.8%

    Windows Kernel Information Disclosure Vulnerability

  43. 7.5CVE-2024-20290EPSS 33%

    A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-stri…

  44. 7.5CVE-2023-43536EPSS 0.3%

    Transient DOS while parse fils IE with length equal to 1.

  45. 7.5CVE-2023-43533EPSS 0.3%

    Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

  46. 7.1CVE-2023-33065EPSS 0.1%

    Information disclosure in Audio while accessing AVCS services from ADSP payload.

  47. 5.5CVE-2023-33064EPSS 0.1%

    Transient DOS in Audio when invoking callback function of ASM driver.

  48. 5.5CVE-2023-33060EPSS 0.1%

    Transient DOS in Core when DDR memory check is called while DDR is not initialized.

  49. 9.1CVE-2023-33058EPSS 0.4%

    Information disclosure in Modem while processing SIB5.

  50. 5.5CVE-2023-6992EPSS 0.2%

    Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A lo…