CWE-126— Buffer Over-read

Transient DOS while processing a frame with malformed shared-key descriptor.

Memory corruption while processing an IOCTL command with an arbitrary address.

Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product rea…

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and …

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.…

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, unde…

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Transient DOS while handling command data during power control processing.

Transient DOS while processing power control requests with invalid antenna or stream values.

Transient DOS while parsing video packets received from the video firmware.

Information disclosure while processing a firmware event.

Information disclosure while processing message from client with invalid payload.

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

Memory corruption while preprocessing IOCTL request in JPEG driver.

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.

Cryptographic issue while copying data to a destination buffer without validating its size.

Transient DOS when processing target power rate tables during channel configuration.

Transient DOS when processing a received frame with an excessively large authentication information element.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method l…

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field.

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() function when received an Ethernet frame with less than 4 bytes of IP packet.

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data.

In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option.

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes o…

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when pa…

A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device receives…

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.