Common Weakness Enumeration
CWE-126
AllowedBuffer Over-read
Abstraction: Variant · Status: Draft
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
980 vulnerabilities reference this CWE, most recent first.
GHSA-4RWX-9HRF-JJ43
Vulnerability from github – Published: 2026-09-10 21:31 – Updated: 2026-09-10 21:31
VLAI
Details
A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modify VPN configuration information without valid credentials.
Successful exploitation may allow a remote unauthenticated attacker to disclose and modify VPN configuration information.
Severity
{
"affected": [],
"aliases": [
"CVE-2026-76653"
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-10T21:17:45Z",
"severity": "MODERATE"
},
"details": "A missing\nauthentication vulnerability in the VPN configuration management has been\nidentified\u00a0in Archer MR600 (v2, v3 \u0026 v5) and TL-MR6400 v8\u00a0due to improper access control; a remote unauthenticated attacker\nmay be able to access and modify VPN configuration information without valid\ncredentials.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow a remote unauthenticated attacker to disclose and modify\nVPN configuration information.",
"id": "GHSA-4rwx-9hrf-jj43",
"modified": "2026-09-10T21:31:38Z",
"published": "2026-09-10T21:31:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76653"
},
{
"type": "WEB",
"url": "https://www.tp-link.com/en/support/download/archer-mr600/v5/#Firmware"
},
{
"type": "WEB",
"url": "https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware"
},
{
"type": "WEB",
"url": "https://www.tp-link.com/us/support/faq/5292"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-4VV2-435C-33CH
Vulnerability from github – Published: 2023-10-03 06:30 – Updated: 2024-04-04 08:02
VLAI
Details
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Severity
8.2 (High)
{
"affected": [],
"aliases": [
"CVE-2023-22385"
],
"database_specific": {
"cwe_ids": [
"CWE-126",
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-10-03T06:15:21Z",
"severity": "CRITICAL"
},
"details": "Memory Corruption in Data Modem while making a MO call or MT VOLTE call.",
"id": "GHSA-4vv2-435c-33ch",
"modified": "2024-04-04T08:02:16Z",
"published": "2023-10-03T06:30:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22385"
},
{
"type": "WEB",
"url": "https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"type": "CVSS_V3"
}
]
}
GHSA-4X46-H598-64QR
Vulnerability from github – Published: 2026-06-30 15:30 – Updated: 2026-10-06 03:31
VLAI
Details
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Severity
6.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-58013"
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-06-30T13:19:17Z",
"severity": "MODERATE"
},
"details": "A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.",
"id": "GHSA-4x46-h598-64qr",
"modified": "2026-10-06T03:31:14Z",
"published": "2026-06-30T15:30:45Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58013"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:49512"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73961"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73962"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74458"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74459"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74460"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74461"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74462"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74463"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74674"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74677"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74678"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74679"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74681"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74683"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74685"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74687"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74688"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:74771"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75652"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75654"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75655"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75657"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75658"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75659"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:75660"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:76042"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2026-58013"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492248"
},
{
"type": "WEB",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:55440"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57015"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:58981"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:61766"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:61783"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:63135"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:63138"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:63140"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65762"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65763"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65767"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65768"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65769"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65770"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65771"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65773"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:66018"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72394"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72395"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72399"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72470"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72475"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72476"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73859"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73909"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73929"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73930"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73959"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:73960"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
]
}
GHSA-5292-QC6P-VF38
Vulnerability from github – Published: 2026-06-25 15:31 – Updated: 2026-06-25 15:31
VLAI
Details
An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.
Severity
4.8 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-40210"
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-06-25T13:16:39Z",
"severity": "MODERATE"
},
"details": "An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.",
"id": "GHSA-5292-qc6p-vf38",
"modified": "2026-06-25T15:31:59Z",
"published": "2026-06-25T15:31:59Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40210"
},
{
"type": "WEB",
"url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
]
}
GHSA-54QP-W9CP-G8G3
Vulnerability from github – Published: 2025-04-03 15:31 – Updated: 2026-06-26 00:31
VLAI
Details
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
Severity
6.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2025-32053"
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-03T14:15:44Z",
"severity": "MODERATE"
},
"details": "A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.",
"id": "GHSA-54qp-w9cp-g8g3",
"modified": "2026-06-26T00:31:59Z",
"published": "2025-04-03T15:31:19Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32053"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4440"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4508"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4560"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4568"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:7436"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:8292"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-32053"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357070"
},
{
"type": "WEB",
"url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/426"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00036.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
]
}
GHSA-5536-R29G-PV75
Vulnerability from github – Published: 2024-09-10 18:30 – Updated: 2024-09-10 18:30
VLAI
Details
Windows Graphics Component Elevation of Privilege Vulnerability
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2024-38250"
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-10T17:15:30Z",
"severity": "HIGH"
},
"details": "Windows Graphics Component Elevation of Privilege Vulnerability",
"id": "GHSA-5536-r29g-pv75",
"modified": "2024-09-10T18:30:46Z",
"published": "2024-09-10T18:30:46Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38250"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38250"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-5587-5JWR-XC28
Vulnerability from github – Published: 2025-05-06 09:31 – Updated: 2025-05-06 09:31
VLAI
Details
Transient DOS while parsing per STA profile in ML IE.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2025-21459"
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-06T09:15:23Z",
"severity": "HIGH"
},
"details": "Transient DOS while parsing per STA profile in ML IE.",
"id": "GHSA-5587-5jwr-xc28",
"modified": "2025-05-06T09:31:34Z",
"published": "2025-05-06T09:31:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21459"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-56QJ-6G3M-JPHJ
Vulnerability from github – Published: 2022-12-06 09:30 – Updated: 2022-12-08 06:30
VLAI
Details
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Severity
5.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2022-42781"
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-12-06T07:15:00Z",
"severity": "MODERATE"
},
"details": "In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.",
"id": "GHSA-56qj-6g3m-jphj",
"modified": "2022-12-08T06:30:30Z",
"published": "2022-12-06T09:30:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42781"
},
{
"type": "WEB",
"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-5796-PG6J-M9RR
Vulnerability from github – Published: 2023-09-05 09:30 – Updated: 2024-04-04 07:28
VLAI
Details
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2023-33015"
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-09-05T07:15:14Z",
"severity": "HIGH"
},
"details": "Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.",
"id": "GHSA-5796-pg6j-m9rr",
"modified": "2024-04-04T07:28:31Z",
"published": "2023-09-05T09:30:21Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33015"
},
{
"type": "WEB",
"url": "https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-57CP-G26V-M46Q
Vulnerability from github – Published: 2025-07-08 18:31 – Updated: 2025-07-08 18:31
VLAI
Details
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2025-47971"
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-07-08T17:15:37Z",
"severity": "HIGH"
},
"details": "Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.",
"id": "GHSA-57cp-g26v-m46q",
"modified": "2025-07-08T18:31:44Z",
"published": "2025-07-08T18:31:44Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47971"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47971"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.