VulnSea

CWE-126

CVEs classified under CWE-126, newest first.

169 CVEsRSS

CVE-2025-11617Medium· 5.4
1y ago

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using …

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using …

▾ Sunlitamazon · freertos-plus-tcpEPSS 0.31%via NVD
CVE-2025-11616Medium· 5.4
1y ago

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect a…

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect a…

▾ Sunlitamazon · freertos-plus-tcpEPSS 0.31%via NVD
CVE-2025-27049Medium· 5.5
1y ago

Transient DOS while processing IOCTL call for image encoding.

Transient DOS while processing IOCTL call for image encoding.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.08%via NVD
CVE-2025-27045Medium· 6.1
1y ago

Information disclosure while processing batch command execution in Video driver.

Information disclosure while processing batch command execution in Video driver.

▾ Sunlitqualcomm · fastconnect_6900_firmwareEPSS 0.10%via NVD
CVE-2025-27041Medium· 5.5
1y ago

Transient DOS while processing video packets received from video firmware.

Transient DOS while processing video packets received from video firmware.

▾ Sunlitqualcomm · ar8035_firmwareEPSS 0.08%via NVD
CVE-2025-27036Medium· 6.1
1y ago

Information disclosure when Video engine escape input data is less than expected minimum size.

Information disclosure when Video engine escape input data is less than expected minimum size.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-27033Medium· 6.1
1y ago

Information disclosure while running video usecase having rogue firmware.

Information disclosure while running video usecase having rogue firmware.

▾ Sunlitqualcomm · qcm5430_firmwareEPSS 0.09%via NVD
CVE-2025-27030Medium· 6.1
1y ago

information disclosure while invoking calibration data from user space to update firmware size.

information disclosure while invoking calibration data from user space to update firmware size.

▾ Sunlitqualcomm · c-v2x_9150_firmwareEPSS 0.09%via NVD
CVE-2025-21488High· 8.2
1y ago

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.27%via NVD
CVE-2025-21487High· 8.2
1y ago

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

▾ Twilightqualcomm · apq8017_firmwareEPSS 0.27%via NVD
CVE-2025-21484High· 8.2
1y ago

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

▾ Twilightqualcomm · sm8750_firmwareEPSS 0.27%via NVD
CVE-2025-4582High· 7.1⚖ disputed
1y ago

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6…

▾ Twilightrti · connext_professionalEPSS 0.14%via NVD
CVE-2023-53159Medium· 4.5
1y ago

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

▾ Sunlitsfackler · opensslEPSS 0.23%via NVD
CVE-2025-21428High· 7.5
1y ago

Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

▾ TwilightQualcomm, Inc. · SnapdragonEPSS 0.26%via CVEORG
CVE-2025-32052Medium· 6.5
1y ago

A flaw was found in libsoup

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream EUS (v.9.2)EPSS 0.67%via NVD
CVE-2025-32053Medium· 6.5
1y ago

A flaw was found in libsoup

A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream EUS (v.9.2)EPSS 0.67%via NVD
CVE-2024-30069Medium· 4.7
2y ago

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 0.57%via NVD
CVE-2022-2175High· 7.8
4y ago

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

▾ Twilightvim · vimEPSS 1.3%via NVD
CVE-2022-2124High· 7.8
4y ago

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

▾ Twilightvim · vimEPSS 1.6%via NVD
CWE-126 vulnerabilities (CVEs) — page 6 · VulnSea