CWE-126
519 CVEs • Abstraction: Variant
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
CVEs (519)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 38Aqt1000 Firmware Qca6390 FirmwareQca6391 Firmware+35 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
1Qualcomm 45Aqt1000 Firmware Qam8295p FirmwareQca6390 Firmware+42 moreJun 17, 2026 Sep 5, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure in Automotive multimedia due to buffer over-read. |
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreAug 10, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 moreAug 10, 2026 Aug 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
1Qualcomm 71Ar8035 Firmware Mdm9628 FirmwareQam8295p Firmware+68 moreJun 17, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in Audio while remapping channel buffer in media codec decoding. |
1Qualcomm 46Apq8009 Firmware Apq8017 FirmwareApq8037 Firmware+43 moreJun 17, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Network Services due to buffer over-read while the device receives DNS response. |
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Extended Negotiation Denial of Service Vulnerability |
1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 moreJun 17, 2026 Jul 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability |
1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 moreJun 17, 2026 Jul 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger t...Show more |
1Qualcomm 183315 5g Iot Firmware Apq8064au FirmwareAqt1000 Firmware+180 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while fetching TX status information. |
1Qualcomm 198Aqt1000 Firmware Ar8031 FirmwareAr9380 Firmware+195 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |