CWE-126— Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.— MITRE CWE catalog
584 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-126page 8 of 12
- CVE-2026-55970MEDIUMCVSS 6.5EG 6.52026-07-27
Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
- CVE-2026-63091MEDIUMCVSS 6.5EG 6.52026-07-20
ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of U…
- CVE-2026-50468MEDIUMCVSS 6.5EG 6.52026-07-14
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-6238MEDIUMCVSS 6.5EG 6.52026-04-28
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG rec…
- CVE-2026-26155MEDIUMCVSS 6.5EG 6.52026-04-14
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- CVE-2026-2394MEDIUMCVSS 6.5EG 6.52026-04-01
Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 before…
- CVE-2025-47402MEDIUMCVSS 6.5EG 6.52026-02-02
Transient DOS when processing a received frame with an excessively large authentication information element.
- CVE-2025-47395MEDIUMCVSS 6.5EG 6.52026-01-07
Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
- CVE-2025-62473MEDIUMCVSS 6.5EG 6.52025-12-09
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-55091MEDIUMCVSS 6.5EG 6.52025-10-16
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data.
- CVE-2025-55090MEDIUMCVSS 6.5EG 6.52025-10-16
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() function when received an Ethernet frame with less than 4 bytes of IP packet.
- CVE-2025-53806MEDIUMCVSS 6.5EG 6.52025-09-09
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-53798MEDIUMCVSS 6.5EG 6.52025-09-09
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-53797MEDIUMCVSS 6.5EG 6.52025-09-09
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-53796MEDIUMCVSS 6.5EG 6.52025-09-09
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-26676MEDIUMCVSS 6.5EG 6.52025-04-08
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-26672MEDIUMCVSS 6.5EG 6.52025-04-08
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-26664MEDIUMCVSS 6.5EG 6.52025-04-08
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-21203MEDIUMCVSS 6.5EG 6.52025-04-08
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-32053MEDIUMCVSS 6.5EG 6.52025-04-03
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
- CVE-2025-32052MEDIUMCVSS 6.5EG 6.52025-04-03
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
- CVE-2024-43595MEDIUMCVSS 6.5EG 6.52024-10-17
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2024-21467MEDIUMCVSS 6.5EG 6.52024-08-05
Information disclosure while handling beacon probe frame during scan entry generation in client side.
- CVE-2024-21459MEDIUMCVSS 6.5EG 6.52024-08-05
Information disclosure while handling beacon or probe response frame in STA.
- CVE-2024-21458MEDIUMCVSS 6.5EG 6.52024-07-01
Information disclosure while handling SA query action frame.
- CVE-2024-21457MEDIUMCVSS 6.5EG 6.52024-07-01
INformation disclosure while handling Multi-link IE in beacon frame.
- CVE-2024-21456MEDIUMCVSS 6.5EG 6.52024-07-01
Information Disclosure while parsing beacon frame in STA.
- CVE-2023-43537MEDIUMCVSS 6.5EG 6.52024-06-03
Information disclosure while handling T2LM Action Frame in WLAN Host.
- CVE-2023-21667MEDIUMCVSS 6.5EG 6.52023-09-05
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
- CVE-2023-33173MEDIUMCVSS 6.5EG 6.52023-07-11
Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33172MEDIUMCVSS 6.5EG 6.52023-07-11
Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33169MEDIUMCVSS 6.5EG 6.52023-07-11
Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33168MEDIUMCVSS 6.5EG 6.52023-07-11
Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33167MEDIUMCVSS 6.5EG 6.52023-07-11
Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33166MEDIUMCVSS 6.5EG 6.52023-07-11
Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-28267MEDIUMCVSS 6.5EG 6.52023-04-11
Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2023-24883MEDIUMCVSS 6.5EG 6.52023-04-11
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-24870MEDIUMCVSS 6.5EG 6.52023-03-14
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-24857MEDIUMCVSS 6.5EG 6.52023-03-14
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2022-32141MEDIUMCVSS 6.5EG 6.52022-06-24
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interact…
- CVE-2020-8244MEDIUMCVSS 6.5EG 6.52020-08-30
A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be …
- CVE-2026-20311MEDIUMCVSS 6.3EG 6.32026-08-05
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is d…
- CVE-2026-11787MEDIUMCVSS 6.3EG 6.32026-06-09
A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that may influence internal filter processing…
- CVE-2023-21697MEDIUMCVSS 5.5EG 6.22023-02-14
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
- CVE-2026-26169MEDIUMCVSS 6.1EG 6.12026-04-14
Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.
- CVE-2025-47331MEDIUMCVSS 6.1EG 6.12026-01-07
Information disclosure while processing a firmware event.
- CVE-2025-47362MEDIUMCVSS 6.1EG 6.12025-11-04
Information disclosure while processing message from client with invalid payload.
- CVE-2025-27064MEDIUMCVSS 6.1EG 6.12025-11-04
Information disclosure while registering commands from clients with diag through diagHal.
- CVE-2025-27045MEDIUMCVSS 6.1EG 6.12025-10-09
Information disclosure while processing batch command execution in Video driver.
- CVE-2025-27036MEDIUMCVSS 6.1EG 6.12025-09-24
Information disclosure when Video engine escape input data is less than expected minimum size.
Map vulnerabilities like CWE-126 to your infrastructure
EchelonGraph correlates every CVE — across CWE-126 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →