CWE-126— Buffer Over-read

INformation disclosure while handling Multi-link IE in beacon frame.

Information Disclosure while parsing beacon frame in STA.

Information disclosure while handling T2LM Action Frame in WLAN Host.

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interact…

A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be …

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is d…

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that may influence internal filter processing…

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

Information disclosure while processing a firmware event.

Information disclosure while processing message from client with invalid payload.

Information disclosure while registering commands from clients with diag through diagHal.

Information disclosure while processing batch command execution in Video driver.

Information disclosure when Video engine escape input data is less than expected minimum size.

Information disclosure while running video usecase having rogue firmware.

information disclosure while invoking calibration data from user space to update firmware size.

Information disclosure while opening a fastrpc session when domain is not sanitized.

Information disclosure while processing IO control commands.

Information disclosure during audio playback.

Information disclosure while processing information on firmware image during core initialization.

information disclosure while invoking the mailbox read API.

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Information disclosure in WLAN HAL while handling command through WMI interfaces.

Information disclosure in WLAN HAL when reception status handler is called.

Information disclosure in WLAN HAL while handling the WMI state info command.

Information disclosure in IOE Firmware while handling WMI command.

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Information Disclosure in WLAN Host when processing WMI event command.

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and …

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi …