CWE-126— Buffer Over-read

Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

Information disclosure due to buffer over-read in modem while reading configuration parameters.

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

Information disclosure in modem due to improper check of IP type while processing DNS server query

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Information disclosure in modem due to buffer over read in dns client due to missing length check

Information disclosure in modem due to buffer over-read while processing response from DNS server

An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers,…

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function.…

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the r…

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Memory Corruption when retrieving output buffer with insufficient size validation.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Memory Corruption when adding user-supplied data without checking available buffer space.

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.