VYPR

CWE-126

Buffer Over-read

VariantDraft

Description

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (492)

page 3 of 25
  • CVE-2023-33058HigFeb 6, 2024
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in Modem while processing SIB5.

  • CVE-2023-24849HigOct 3, 2023
    risk 0.53cvss 8.2epss 0.00

    Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

  • CVE-2023-24848HigOct 3, 2023
    risk 0.53cvss 8.2epss 0.00

    Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

  • CVE-2023-22385HigOct 3, 2023
    risk 0.53cvss 8.2epss 0.00

    Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

  • CVE-2023-21625HigAug 8, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

  • CVE-2023-21669HigJun 6, 2023
    risk 0.53cvss 8.2epss 0.00

    Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

  • CVE-2022-40505HigMay 2, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

  • CVE-2022-40503HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

  • CVE-2022-33295HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

  • CVE-2022-33291HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

  • CVE-2022-33287HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

  • CVE-2022-33258HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure due to buffer over-read in modem while reading configuration parameters.

  • CVE-2022-33228HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

  • CVE-2022-33222HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

  • CVE-2022-25747HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

  • CVE-2022-25730HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in modem due to improper check of IP type while processing DNS server query

  • CVE-2022-25726HigApr 13, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

  • CVE-2022-33271HigFeb 12, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

  • CVE-2022-33229HigFeb 12, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

  • CVE-2022-25738HigFeb 12, 2023
    risk 0.53cvss 8.2epss 0.00

    Information disclosure in modem due to buffer over-red while performing checksum of packet received