CWE-126 Buffer Over-read
variantThe product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (734)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7679US | critical9.8 | Exploit | ||
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. | ||||
| CVE-2023-49285US | high7.5 | — | ||
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Messag… | ||||
| CVE-2017-7668US | high7.5 | — | ||
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input str… | ||||
| CVE-2021-20093US | critical9.1 | — | ||
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or cr… | ||||
| CVE-2023-36397US | critical9.8 | — | ||
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | ||||
| CVE-2009-2495US | high7.8 | — | ||
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not pro… | ||||
| CVE-2006-1516US | medium5.0 | Exploit | ||
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a usern… | ||||
| CVE-2024-20290US | high7.5 | — | ||
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This… | ||||
| CVE-2022-24292US | critical9.8 | — | ||
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. | ||||
| CVE-2026-28364US | high7.8 | Exploit | ||
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The… | ||||
| CVE-2018-14790US | critical9.8 | — | ||
Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remo… | ||||
| CVE-2012-2788US | high10.0 | — | ||
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… | ||||
| CVE-2019-3563US | critical9.8 | — | ||
Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior… | ||||
| CVE-2024-49839US | critical9.8 | — | ||
Memory corruption during management frame processing due to mismatch in T2LM info element. | ||||
| CVE-2023-22385US | critical9.8 | — | ||
Memory Corruption in Data Modem while making a MO call or MT VOLTE call. | ||||
| CVE-2020-3675US | critical9.8 | — | ||
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… | ||||
| CVE-2019-10557US | critical9.8 | — | ||
Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Con… | ||||
| CVE-2017-14910US | critical9.8 | — | ||
In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, S… | ||||
| CVE-2019-11036US | critical9.1 | — | ||
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_proce… | ||||
| CVE-2025-55081US | critical9.1 | — | ||
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of
certain SSL/TLS client hell… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan