CWE-126
Buffer Over-read
Description
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (492)
page 13 of 25| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-40524 | Med | 0.44 | 6.7 | 0.00 | Sep 5, 2023 | Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. | ||
| CVE-2022-33297 | Med | 0.44 | 6.8 | 0.00 | Apr 13, 2023 | Information disclosure due to buffer overread in Linux sensors | ||
| CVE-2022-33221 | Med | 0.44 | 6.8 | 0.00 | Feb 12, 2023 | Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. | ||
| CVE-2023-0396 | Med | 0.44 | 6.8 | 0.00 | Jan 25, 2023 | A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses. | ||
| CVE-2022-4435 | Med | 0.44 | 6.7 | 0.00 | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure. | ||
| CVE-2022-4434 | Med | 0.44 | 6.7 | 0.00 | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure. | ||
| CVE-2022-4433 | Med | 0.44 | 6.7 | 0.00 | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure. | ||
| CVE-2022-4432 | Med | 0.44 | 6.7 | 0.00 | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure. | ||
| CVE-2026-26282 | Med | 0.43 | 6.6 | 0.00 | Feb 19, 2026 | NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header parser due to missing bounds check. Opening a crafted file with NanaZip causes a crash or leaks heap… | ||
| CVE-2024-23366 | Med | 0.43 | 6.6 | 0.00 | Jan 6, 2025 | Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size. | ||
| CVE-2023-28572 | Med | 0.43 | 6.6 | 0.00 | Nov 7, 2023 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. | ||
| CVE-2026-65794 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-53414 | Med | 0.42 | 6.5 | 0.00 | Aug 11, 2026 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access. | ||
| CVE-2026-66312 | Med | 0.42 | 6.5 | 0.01 | Aug 4, 2026 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | ||
| CVE-2025-47403 | Med | 0.42 | 6.5 | 0.00 | May 4, 2026 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. | ||
| CVE-2025-47401 | Med | 0.42 | 6.5 | 0.00 | May 4, 2026 | Transient DOS when processing target power rate tables during channel configuration. | ||
| CVE-2026-34059 | Hig | 0.42 | 7.5 | 0.00 | May 4, 2026 | Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue. | ||
| CVE-2026-6238 | Med | 0.42 | 6.5 | 0.00 | Apr 28, 2026 | The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to… | ||
| CVE-2026-26155 | Med | 0.42 | 6.5 | 0.01 | Apr 14, 2026 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | ||
| CVE-2026-2394 | Med | 0.42 | 6.5 | 0.00 | Apr 1, 2026 | Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from… |
- risk 0.44cvss 6.7epss 0.00
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
- risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Linux sensors
- risk 0.44cvss 6.8epss 0.00
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
- risk 0.44cvss 6.8epss 0.00
A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses.
- risk 0.44cvss 6.7epss 0.00
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
- risk 0.44cvss 6.7epss 0.00
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.
- risk 0.44cvss 6.7epss 0.00
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
- risk 0.44cvss 6.7epss 0.00
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
- risk 0.43cvss 6.6epss 0.00
NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header parser due to missing bounds check. Opening a crafted file with NanaZip causes a crash or leaks heap…
- risk 0.43cvss 6.6epss 0.00
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
- risk 0.43cvss 6.6epss 0.00
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.00
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
- risk 0.42cvss 6.5epss 0.00
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
- risk 0.42cvss 6.5epss 0.00
Transient DOS when processing target power rate tables during channel configuration.
- risk 0.42cvss 7.5epss 0.00
Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
- risk 0.42cvss 6.5epss 0.00
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to…
- risk 0.42cvss 6.5epss 0.01
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.00
Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from…