CWE-126: Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- libexpat libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16 6.3 Medium
- asterisk, asterisk certified-asterisk +1 more Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 6.5 Medium
- openwrt odhcpd odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp() 6.5 Medium
- openwrt odhcpd odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure 8.7 High
- python pillow Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels 8.8 High
- python pillow Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size 6.3 Medium
- devolutions server, mariadb +1 more MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. 4.3 Medium
-
gst-plugins-good1.0Debian An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file,... 5.5 Medium - microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 more Microsoft Office PowerPoint Information Disclosure Vulnerability 6.5 Medium
- freebsd Multiple vulnerabilities in bhyve device models 7.0 High
- curl info leak uploading over WebSockets with GnuTLS 8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Role: DNS Server Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 more Windows Broadcast DVR User Service Information Disclosure Vulnerability 5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Excel Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows GDI Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +7 more +9 more Windows StateRepository API Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows rndismp6.sys Information Disclosure Vulnerability 4.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Encrypting File System (EFS) Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Event Logging Service Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Management Instrumentation Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 more Windows Win32 Kernel Subsystem Information Disclosure Vulnerability 5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Excel Information Disclosure Vulnerability 6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 more Microsoft Office Word Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows USB Driver Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows CD-ROM Driver Elevation of Privilege Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows CD-ROM Driver Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 more Servicing Stack Updates Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Overlay Filter Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Servicing Stack Updates Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Desktop Window Manager Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Overlay Filter Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Overlay Filter Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Overlay Filter Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Overlay Filter Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 more Windows Overlay Filter Remote Code Execution Vulnerability 7.8 High
- canva affinity The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate... 3.6 Low
- canva affinity The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle... 3.6 Low
- canva affinity The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate... 2.9 Low
- x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read 6.9 Medium
- qualcomm congo firmware, fastconnect 7800 firmware, fastconnect 8800 mobile connectivity system firmware +12 more +14 more Buffer Over-read in WLAN HAL 7.5 High
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing permission check. This could... 5.3 Medium
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... 5.3 Medium
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... 5.3 Medium
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing permission check. This could... 5.3 Medium
- eclipse foundation threadx netx duo Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest) 6.3 Medium
- eclipse foundation netx duo The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks... 7.5 High
- the gnu c library glibc One-byte overread in strncasecmp on Power8 3.7 Low
- wireshark Buffer Over-read in Wireshark 4.7 Medium
- Show olderLoading…