← Back
CWE-126

476 CVEs • Abstraction: Variant

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

JSON object

Loading...

CVEs (476)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-21659
1Qualcomm
270315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+267 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2023-21658
1Qualcomm
151Ar8035 Firmware
Ar9380 FirmwareCsr8811 Firmware+148 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
CVE-2023-24942
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
May 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-24901
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
May 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows NFS Portmapper Information Disclosure Vulnerability
CVE-2022-33273
1Qualcomm
99Aqt1000 Firmware
Ar8035 FirmwareQam8295p Firmware+96 more
Jun 17, 2026
May 2, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
CVE-2022-40505
1Qualcomm
139205 Lte Modem Firmware
9206 Lte Modem Firmware9207 Lte Modem Firmware+10 more
Jun 17, 2026
May 2, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
CVE-2022-40503
1Qualcomm
1858905 Firmware
8909 Firmware8953 Firmware+182 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33297
1Qualcomm
10Qca6310 Firmware
Qca6320 FirmwareSd835 Firmware+7 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure due to buffer overread in Linux sensors
CVE-2022-33295
1Qualcomm
12Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+9 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
CVE-2022-33291
1Qualcomm
399205 Lte Modem Firmware
9206 Lte Modem Firmware9207 Lte Modem Firmware+36 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
CVE-2022-33287
1Qualcomm
399205 Lte Modem Firmware
9206 Lte Modem Firmware9207 Lte Modem Firmware+36 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
CVE-2022-33258
1Qualcomm
12Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+9 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure due to buffer over-read in modem while reading configuration parameters.
CVE-2022-33228
1Qualcomm
12Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+9 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
CVE-2022-33222
1Qualcomm
13Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+10 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
CVE-2022-25747
1Qualcomm
12Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+9 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
CVE-2022-25730
1Qualcomm
27Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+24 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in modem due to improper check of IP type while processing DNS server query
CVE-2022-25726
1Qualcomm
26Mdm8207 Firmware
Mdm9205 FirmwareMdm9206 Firmware+23 more
Jun 17, 2026
Apr 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
CVE-2023-24513
1Arista
1Cloudeos
Jun 17, 2026
Apr 12, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buf...Show more
On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.Show less
CVE-2023-28267
1Microsoft
14Remote Desktop Client
Windows 10 1507Windows 10 1607+11 more
Jun 17, 2026
Apr 11, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2023-28266
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
Apr 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Windows Common Log File System Driver Information Disclosure Vulnerability