Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

CVEs (476)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-12011 - - Jun 17, 2026 Feb 13, 2025 N/A· v4 7.6 HIGH· v3 N/A· v2 A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote u...Show more A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism.Show less
CVE-2024-49839 1Qualcomm 185Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+182 more Jun 17, 2026 Feb 3, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption during management frame processing due to mismatch in T2LM info element.
CVE-2024-49838 1Qualcomm 165Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+162 more Jun 17, 2026 Feb 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure while parsing the OCI IE with invalid length.
CVE-2024-45561 1Qualcomm 32Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+29 more Jun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling IOCTL call from user-space to set latency level.
CVE-2024-38417 1Qualcomm 56Ar8035 Firmware C V2x 9150 FirmwareFastconnect 6900 Firmware+53 more Jun 17, 2026 Feb 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while processing IO control commands.
CVE-2024-38416 1Qualcomm 71Ar8035 Firmware C V2x 9150 FirmwareFastconnect 6800 Firmware+68 more Jun 17, 2026 Feb 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure during audio playback.
CVE-2024-38414 1Qualcomm 28Fastconnect 6900 Firmware Fastconnect 7800 FirmwareQam8295p Firmware+25 more Jun 17, 2026 Feb 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while processing information on firmware image during core initialization.
CVE-2024-38404 1Qualcomm 40Ar8035 Firmware Fastconnect 7800 FirmwareQca6584au Firmware+37 more Jun 17, 2026 Feb 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
CVE-2025-21277 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jan 14, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21271 1Microsoft 5Windows 10 1809 Windows 10 21h2Windows 10 22h2+2 more Jun 17, 2026 Jan 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-21176 1Microsoft 3.net .net FrameworkVisual Studio 2017 Jun 17, 2026 Jan 14, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2024-45559 1Qualcomm 23Qam8255p Firmware Qam8295p FirmwareQam8620p Firmware+20 more Jun 17, 2026 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
CVE-2024-45558 1Qualcomm 182Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+179 more Jun 17, 2026 Jan 6, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
CVE-2024-45548 1Qualcomm 10Fastconnect 6900 Firmware Fastconnect 7800 FirmwareQcc2073 Firmware+7 more Jun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
CVE-2024-45546 1Qualcomm 10Fastconnect 6900 Firmware Fastconnect 7800 FirmwareQcc2073 Firmware+7 more Jun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
CVE-2024-43063 1Qualcomm 17Qam8255p Firmware Qam8295p FirmwareQam8650p Firmware+14 more Jun 17, 2026 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 information disclosure while invoking the mailbox read API.
CVE-2024-33067 1Qualcomm 76Ar8035 Firmware C V2x 9150 FirmwareCsrb31024 Firmware+73 more Jun 17, 2026 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
CVE-2024-33061 1Qualcomm 9Qcs8550 Firmware Sw5100 FirmwareSw5100p Firmware+6 more Jun 17, 2026 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
CVE-2024-23366 1Qualcomm 17Qam8255p Firmware Qam8295p FirmwareQam8650p Firmware+14 more Jun 17, 2026 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
CVE-2024-49088 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Dec 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability

Previous 1...91011...24 Next