cve.bz

CWE-126: Buffer Over-read, page 9

Filter

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

What the weakness is: CWE-126 at MITRE

Ask an AI about CWE-126

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-126: Buffer Over-read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/126.html and https://cve.bz/cve/cwe/126?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-43512EPSS 0.3%

    Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

  2. 7.5CVE-2023-33116EPSS 0.3%

    Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

  3. 7.5CVE-2023-33112EPSS 0.3%

    Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.

  4. 7.5CVE-2023-33062EPSS 0.3%

    Transient DOS in WLAN Firmware while parsing a BTM request.

  5. 7.5CVE-2023-33040EPSS 0.3%

    Transient DOS in Data Modem during DTLS handshake.

  6. 7.5CVE-2023-35643EPSS 2.6%

    DHCP Server Service Information Disclosure Vulnerability

  7. 7.5CVE-2023-35638EPSS 3.3%

    DHCP Server Service Denial of Service Vulnerability

  8. 7.5CVE-2023-33098EPSS 0.5%

    Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

  9. 7.5CVE-2023-33097EPSS 0.5%

    Transient DOS in WLAN Firmware while processing a FTMR frame.

  10. 7.5CVE-2023-33081EPSS 0.5%

    Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

  11. 7.5CVE-2023-33080EPSS 0.3%

    Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

  12. 7.5CVE-2023-49285EPSS 88%

    Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users…

  13. 9.8CVE-2023-36397EPSS 18%

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  14. 7.5CVE-2023-36392EPSS 2.5%

    DHCP Server Service Denial of Service Vulnerability

  15. 4.4CVE-2023-43574EPSS 0.2%

    A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  16. 4.4CVE-2023-43572EPSS 0.2%

    A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  17. 4.4CVE-2023-43568EPSS 0.2%

    A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  18. 7.5CVE-2023-33061EPSS 0.5%

    Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

  19. 7.5CVE-2023-33048EPSS 0.5%

    Transient DOS in WLAN Firmware while parsing t2lm buffers.

  20. 7.5CVE-2023-33047EPSS 0.5%

    Transient DOS in WLAN Firmware while parsing no-inherit IES.

  21. 8.8CVE-2023-28572EPSS 0.5%

    Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

  22. 5.5CVE-2023-28569EPSS 0.1%

    Information disclosure in WLAN HAL while handling command through WMI interfaces.

  23. 5.5CVE-2023-28568EPSS 0.1%

    Information disclosure in WLAN HAL when reception status handler is called.

  24. 5.5CVE-2023-28566EPSS 0.1%

    Information disclosure in WLAN HAL while handling the WMI state info command.

  25. 5.5CVE-2023-28563EPSS 0.1%

    Information disclosure in IOE Firmware while handling WMI command.

  26. 5.5CVE-2023-28554EPSS 0.1%

    Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

  27. 5.5CVE-2023-28553EPSS 0.1%

    Information Disclosure in WLAN Host when processing WMI event command.

  28. 7.5CVE-2023-36581EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  29. 7.5CVE-2023-33027EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing rsn ies.

  30. 7.5CVE-2023-33026EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing a NAN management frame.

  31. 5.5CVE-2023-28571EPSS 0.1%

    Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

  32. 7.5CVE-2023-24849EPSS 0.4%

    Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

  33. 7.5CVE-2023-24848EPSS 0.4%

    Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

  34. 9.8CVE-2023-22385EPSS 0.4%

    Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

  35. 5.3CVE-2023-38152EPSS 24%

    DHCP Server Service Information Disclosure Vulnerability

  36. 7.8CVE-2023-38144EPSS 3.4%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  37. 5.5CVE-2023-36803EPSS 1.0%

    Windows Kernel Information Disclosure Vulnerability

  38. 5.3CVE-2023-36801EPSS 1.6%

    DHCP Server Service Information Disclosure Vulnerability

  39. 7.8CVE-2023-36773EPSS 0.7%

    3D Builder Remote Code Execution Vulnerability

  40. 7.5CVE-2023-33016EPSS 0.4%

    Transient DOS in WLAN firmware while parsing MLO (multi-link operation).

  41. 7.5CVE-2023-33015EPSS 0.4%

    Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

  42. 6.5CVE-2023-21667EPSS 0.4%

    Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

  43. 7.8CVE-2022-40524EPSS 0.1%

    Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

  44. 5.5CVE-2022-33220EPSS 0.1%

    Information disclosure in Automotive multimedia due to buffer over-read.

  45. 5.5CVE-2023-4758EPSS 0.3%

    Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

  46. 7.5CVE-2023-38172EPSS 2.0%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  47. 7.8CVE-2023-36904EPSS 0.6%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  48. 7.5CVE-2023-28555EPSS 0.4%

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  49. 7.5CVE-2023-21625EPSS 0.4%

    Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

  50. 5.5CVE-2023-3649EPSS 0.2%

    iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file