Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

CVEs (519)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-24513 1Arista 1Cloudeos Jun 17, 2026 Apr 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buf...Show more On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.Show less
CVE-2023-28267 1Microsoft 14Remote Desktop Client Windows 10 1507Windows 10 1607+11 more Jun 17, 2026 Apr 11, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2023-28266 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2023-24883 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-20112 1Cisco 31Business 150ax Firmware Business 151axm FirmwareCatalyst 9105ax Firmware+28 more Jun 17, 2026 Mar 23, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validati...Show more A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.Show less
CVE-2023-24870 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Mar 14, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-24858 1Microsoft 12Windows 10 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Mar 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-24857 1Microsoft 12Windows 10 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Mar 14, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2022-40535 1Qualcomm 71Csr8811 Firmware Ipq8070a FirmwareIpq8071a Firmware+68 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while sending a packet to device.
CVE-2022-33309 1Qualcomm 65Csr8811 Firmware Ipq5010 FirmwareIpq5018 Firmware+62 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.
CVE-2023-21820 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Aug 19, 2026 Feb 14, 2023 N/A· v4 7.4 HIGH· v3 N/A· v2 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2023-21813 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Aug 19, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Secure Channel Denial of Service Vulnerability
CVE-2023-21811 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Aug 19, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21720 1Microsoft 1Edge Chromium Aug 19, 2026 Feb 14, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2023-21701 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Aug 19, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
CVE-2023-21697 1Microsoft 10Windows 10 Windows 10 1607Windows 10 1809+7 more Aug 19, 2026 Feb 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-0817 1Gpac 1Gpac Jun 17, 2026 Feb 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVE-2022-40512 1Qualcomm 295Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+292 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-34145 1Qualcomm 94Csr8811 Firmware Ipq5010 FirmwareIpq5018 Firmware+91 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN Host while parsing frame information.
CVE-2022-33306 1Qualcomm 131Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+128 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Previous 1...212223...26 Next