CWE-126— Buffer Over-read

Information disclosure while parsing the OCI IE with invalid length.

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

Information disclosure while parsing the multiple MBSSID IEs from the beacon.

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

Information disclosure in Video while parsing mp2 clip with invalid section length.

Information disclosure in Modem while processing SIB5.

Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

Information disclosure due to buffer over-read in modem while reading configuration parameters.

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

Information disclosure in modem due to improper check of IP type while processing DNS server query

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Information disclosure in modem due to buffer over read in dns client due to missing length check

Information disclosure in modem due to buffer over-read while processing response from DNS server

An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers,…

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the numbe…

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function.…

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the r…

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.