CWE-126
476 CVEs • Abstraction: Variant
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
CVEs (476)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 146Aqt1000 Firmware Ar9380 FirmwareC V2x 9150 Firmware+143 moreJun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. |
1Qualcomm 142Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+139 moreJun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure in WLAN Host when processing WMI event command. |
1Microsoft 12Windows 10 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
1Qualcomm 327315 5g Iot Modem Firmware 8098 Firmware8998 Firmware+324 moreJun 17, 2026 Oct 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing rsn ies. |
1Qualcomm 194Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+191 moreJun 17, 2026 Oct 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing a NAN management frame. |
1Qualcomm 858098 Firmware 8998 FirmwareApq8064au Firmware+82 moreJun 17, 2026 Oct 3, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
1Qualcomm 236315 5g Iot Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+233 moreJun 17, 2026 Oct 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
1Qualcomm 242315 5g Iot Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+239 moreJun 17, 2026 Oct 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
1Qualcomm 239315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+236 moreJun 17, 2026 Oct 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 moreJun 17, 2026 Sep 12, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 DHCP Server Service Information Disclosure Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability |
1Microsoft 9Windows 10 1607 Windows 10 1809Windows 10 21h2+6 moreJun 17, 2026 Sep 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability |
1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 moreJun 17, 2026 Sep 12, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 DHCP Server Service Information Disclosure Vulnerability |
3D Builder Remote Code Execution Vulnerability |
1Qualcomm 66Csr8811 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+63 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN firmware while parsing MLO (multi-link operation). |
1Qualcomm 190315 5g Firmware Aqt1000 FirmwareAr8035 Firmware+187 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. |
1Qualcomm 43Qca6390 Firmware Qca6391 FirmwareQca6426 Firmware+40 moreJun 17, 2026 Sep 5, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
1Qualcomm 38Aqt1000 Firmware Qca6390 FirmwareQca6391 Firmware+35 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
1Qualcomm 45Aqt1000 Firmware Qam8295p FirmwareQca6390 Firmware+42 moreJun 17, 2026 Sep 5, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in Automotive multimedia due to buffer over-read. |
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. |