Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

CVEs (476)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-35643 1Microsoft 4Windows Server 2012 Windows Server 2016Windows Server 2019+1 more Jun 17, 2026 Dec 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 DHCP Server Service Information Disclosure Vulnerability
CVE-2023-35638 1Microsoft 4Windows Server 2012 Windows Server 2016Windows Server 2019+1 more Jun 17, 2026 Dec 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 DHCP Server Service Denial of Service Vulnerability
CVE-2023-33098 1Qualcomm 257315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+254 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVE-2023-33097 1Qualcomm 121Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+118 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing a FTMR frame.
CVE-2023-33081 1Qualcomm 148Aqt1000 Firmware Ar8035 FirmwareCsr8811 Firmware+145 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
CVE-2023-33080 1Qualcomm 365315 5g Iot Modem Firmware 8098 Firmware8998 Firmware+362 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-49285 1Squid Cache 1Squid Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid...Show more Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-36397 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-36392 1Microsoft 4Windows Server 2012 Windows Server 2016Windows Server 2019+1 more Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 DHCP Server Service Denial of Service Vulnerability
CVE-2023-43574 1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more Jun 17, 2026 Nov 8, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-43572 1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more Jun 17, 2026 Nov 8, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-43568 1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more Jun 17, 2026 Nov 8, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-33061 1Qualcomm 114Ar8035 Firmware Csr8811 FirmwareImmersive Home 214 Platform Firmware+111 more Jun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
CVE-2023-33048 1Qualcomm 114Ar8035 Firmware Csr8811 FirmwareImmersive Home 214 Platform Firmware+111 more Jun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing t2lm buffers.
CVE-2023-33047 1Qualcomm 177Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+174 more Jun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing no-inherit IES.
CVE-2023-28572 1Qualcomm 54Csrb31024 Firmware Fastconnect 6800 FirmwareFastconnect 6900 Firmware+51 more Jun 17, 2026 Nov 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
CVE-2023-28569 1Qualcomm 207Aqt1000 Firmware Ar9380 FirmwareCsr8811 Firmware+204 more Jun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28568 1Qualcomm 87Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+84 more Jun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in WLAN HAL when reception status handler is called.
CVE-2023-28566 1Qualcomm 124Aqt1000 Firmware Csrb31024 FirmwareFastconnect 6200 Firmware+121 more Jun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in WLAN HAL while handling the WMI state info command.
CVE-2023-28563 1Qualcomm 229Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+226 more Jun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in IOE Firmware while handling WMI command.

Previous 1...151617...24 Next