CWE-126— Buffer Over-read

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

Transient DOS in WLAN Firmware while parsing a BTM request.

Transient DOS in Audio when invoking callback function of ASM driver.

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Information Disclosure while processing IOCTL request in FastRPC.

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

Transient DOS while processing channel information for speaker protection v2 module in ADSP.

Transient DOS in WLAN Firmware while processing a FTMR frame.

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Windows Extended Negotiation Denial of Service Vulnerability

DHCP Server Service Denial of Service Vulnerability

DHCP Server Service Information Disclosure Vulnerability

DHCP Server Service Denial of Service Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

3D Builder Remote Code Execution Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

Information disclosure while parsing dts header atom in Video.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

Transient DOS while parse fils IE with length equal to 1.

Information disclosure while handling T2LM Action Frame in WLAN Host.

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

Information disclosure in Video while parsing mp2 clip with invalid section length.

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users…