CWE-126: Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- bfabiszewski bfabiszewski/libmobi, libmobi project libmobi +1 moreBuffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi6.6 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability8.6 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +21 more +23 moreSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.7.5 High
- iconics genesis64, mitsubishi electric corporation genesis32, iconics suite +2 more +4 moreBuffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to...5.9 Medium
- google libjxlMemory Overread in libjxl4.5 Medium
- codesys, codesys v2, wago 750-8202 firmware +26 more +28 moreCODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)9.1 Critical
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software MPLS OAM Denial of Service Vulnerability8.6 High
- google asyloMemory overread secure enclave in Asylo 0.6.25.3 Medium
- cisco sd-wan, sd-wan solution +1 moreCisco SD-WAN Software Information Disclosure Vulnerability5.3 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...5.5 Medium
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability8.6 High
- realtek rtl8195a firmwareThe function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April...7.5 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability8.6 High
- tcpdumptcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose...3.3 Low
- bufferlist project bufferlist, debian linux +1 moreRemote Memory Exposure in bl6.5 Medium
- mqtt-packet project mqtt-packetImproper Input Validation and Buffer Over-read in mqtt-packet7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extension4.8 Medium
- facebook wangleWangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM...7.5 High
- fuji electric frenic loader of frenic-mini (c1), frenic-mini (c2), frenic-eco, frenic-multi, frenic-mega, frenic-ace, fujielectric frenic loader 3.3 firmware +1 moreFuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco,...9.8 Critical
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Critical
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 High
- microsoft visual studio, visual studio .net, visual c\+\+ +2 moreThe Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...7.8 High
- apache tomcatApache Tomcat Buffer Over-Read7.8 High