Vulnerabilities (CVE)

Filtered by CWE-126
Total 252 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-4582 1 Rti 1 Connext Professional 2025-10-02 N/A 7.1 HIGH
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 4.4a before 5.2.*.
CVE-2025-54901 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-10-01 N/A 5.5 MEDIUM
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-27057 1 Qualcomm 422 Ar8035, Ar8035 Firmware, Csr8811 and 419 more 2025-09-25 N/A 7.5 HIGH
Transient DOS while handling beacon frames with invalid IE header length.
CVE-2025-27030 1 Qualcomm 82 C-v2x 9150, C-v2x 9150 Firmware, Qam8295p and 79 more 2025-09-25 N/A 6.1 MEDIUM
information disclosure while invoking calibration data from user space to update firmware size.
CVE-2025-27033 1 Qualcomm 64 Qca6698aq, Qca6698aq Firmware, Qcm5430 and 61 more 2025-09-25 N/A 6.1 MEDIUM
Information disclosure while running video usecase having rogue firmware.
CVE-2025-27036 1 Qualcomm 42 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 39 more 2025-09-25 N/A 6.1 MEDIUM
Information disclosure when Video engine escape input data is less than expected minimum size.
CVE-2025-47317 1 Qualcomm 106 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 103 more 2025-09-25 N/A 7.8 HIGH
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
CVE-2025-47326 1 Qualcomm 240 Ar8035, Ar8035 Firmware, Csr8811 and 237 more 2025-09-25 N/A 7.5 HIGH
Transient DOS while handling command data during power control processing.
CVE-2025-47328 1 Qualcomm 134 Fastconnect 7800, Fastconnect 7800 Firmware, Immersive Home 3210 Platform and 131 more 2025-09-25 N/A 7.5 HIGH
Transient DOS while processing power control requests with invalid antenna or stream values.
CVE-2024-12975 2025-09-16 N/A N/A
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.
CVE-2025-36855 2025-09-08 N/A 8.8 HIGH
A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. This issue affects EOL ASP.NET 6.0.0 <= 6.0.36 as represented in this CVE, as well as 8.0.0 <= 8.0.11 & <= 9.0.0 as represented in CVE-2025-21176. Additionally, if you've deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
CVE-2024-30039 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-08-27 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2025-27029 1 Qualcomm 134 Fastconnect 7800, Fastconnect 7800 Firmware, Immersive Home 3210 Platform and 131 more 2025-08-20 N/A 7.5 HIGH
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
CVE-2024-53019 1 Qualcomm 162 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 159 more 2025-08-20 N/A 8.2 HIGH
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
CVE-2025-27065 1 Qualcomm 300 Ar8035, Ar8035 Firmware, Fastconnect 6800 and 297 more 2025-08-20 N/A 7.5 HIGH
Transient DOS while processing a frame with malformed shared-key descriptor.
CVE-2025-21421 1 Qualcomm 90 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 87 more 2025-08-19 N/A 7.8 HIGH
Memory corruption while processing escape code in API.
CVE-2025-21457 1 Qualcomm 30 Ar8035, Ar8035 Firmware, Fastconnect 7800 and 27 more 2025-08-19 N/A 6.1 MEDIUM
Information disclosure while opening a fastrpc session when domain is not sanitized.
CVE-2025-27068 1 Qualcomm 32 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6900 and 29 more 2025-08-18 N/A 7.8 HIGH
Memory corruption while processing an IOCTL command with an arbitrary address.
CVE-2025-53736 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2025-08-18 N/A 6.8 MEDIUM
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2024-21459 1 Qualcomm 350 Ar8035, Ar8035 Firmware, Ar9380 and 347 more 2025-08-15 N/A 6.5 MEDIUM
Information disclosure while handling beacon or probe response frame in STA.