CWE-126: Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- apache thriftApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()6.9 Medium
- neutrinolabs xrdpxrdp: Malformed Confirm Active capability sets cause out-of-bounds reads5.3 Medium
- proftpdProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser7.1 High
- libgit2libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data7.5 High
- cyrusimap cyrus imapAn issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in...3.1 Low
- taosdata tdengineTDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken5.4 Medium
- microsoft windows subsystem for linux (wsl2), windows subsystem for linux +1 moreWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft sql server 2025 (cu 6), sql server 2025 for x64-based systems (gdr), sql server 2025 +2 moreMicrosoft SQL Server Information Disclosure Vulnerability6.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Denial of Service Vulnerability4.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Print Spooler Information Disclosure Vulnerability6.1 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Redirected Drive Buffering System Elevation of Privilege Vulnerability7.0 High
- fortinet fortios, fortiproxy, fortipam +2 more +4 moreA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7...4.1 Medium
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7...4.1 Medium
sqliteAlpaquita,lemonRed Hat,sqlite3Debian +7 more +9 moreAn issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain...6.1 Medium- qualcomm aqt1000 firmware, cologne firmware, fastconnect 6200 firmware +45 more +47 moreBuffer Over-read in Windows Compute7.8 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()6.5 Medium
- gnu gzipGlobal Buffer Overflow in GNU gzip6.9 Medium
- powerdns dnsdistOut-of-bounds read in SetMacAddrAction4.8 Medium
- tornadoweb tornadoTornado: Out-of-bounds memory access in C extension5.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Projected File System Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 copilot, 365 apps for enterprise +10 more +12 moreMicrosoft Office Information Disclosure Vulnerability4.7 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing5.0 Medium
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`7.3 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csr8811 firmware +185 more +187 moreBuffer Over-read in WLAN Host Communication5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreslip: bound decode() reads against the compressed packet length8.2 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers4.9 Medium
- postgresqlPostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array4.3 Medium
- leont crypt::argon2, crypt\ +1 moreCrypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
diesel-asynccrates.iodiesel-async may expose uninitialized padding bytes for MySQL temporal columns2.0 Low- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +29 more +31 moreBuffer Over-read in DSP Service6.1 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +255 more +257 moreBuffer Over-read in WLAN Firmware6.5 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +243 more +245 moreBuffer Over-read in WLAN HAL6.5 Medium
- apache http serverApache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()7.5 High
- linuxfoundation automotive grade linuxAGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c...7.1 High
- wiresharkBuffer Over-read in Wireshark5.5 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: information disclosure via heap overread in rsa key exchange8.2 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreBuffer overread in ns_printrrf with corrupted RDATA field6.5 Medium
- wolfsshPotential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize2.3 Low
- Show moreLoading…