CWE-126 vulnerabilities

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.

CVE-2026-102728 is a buffer over-read vulnerability in Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a. The issue occurs in the NetX Secure TLS client's ServerHello parser and the DTLS client's HelloVerifyRequest parser, which read fields without verifying the message length first. This can cause the client to read up to three bytes beyond the intended handshake message boundary, potentially causing faults on systems with memory protection.

CVE-2026-102758 is a buffer over-read vulnerability in the Eclipse Foundation NetX Duo library's function _nx_secure_x509_asn1_tlv_block_parse(). This function reads an ASN.1 tag byte from a buffer before verifying the buffer length, potentially reading one byte beyond the buffer when the remaining length is zero. The vulnerability affects X.509 certificate parsing during TLS handshakes. The issue can cause an out-of-bounds read but does not impact confidentiality or integrity, only availability. The affected versions are from 0 up to and including 6.5.1.202602.

CVE-2026-96420 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.8. It involves a buffer over-read in the Toshiba file parser that can cause the application to crash, resulting in a denial of service. The vulnerability requires local access with high attack complexity and user interaction. There is no indication of confidentiality or integrity impact.

A buffer over-read vulnerability exists in the MBIM protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5.

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

CVE-2026-94286 is a high-severity vulnerability in x.org's libXtst library before version 1.2.6. It involves a buffer over-read in the RECORD reply parser that could be exploited by malicious X servers to crash connected X clients. The vulnerability does not allow data modification or privilege escalation but can cause denial of service by crashing clients.

A buffer over-read vulnerability (CWE-126) exists in Apache Tomcat Native during the TLS handshake process. This flaw allows a malicious user to cause a denial of service (DoS) by triggering a JVM crash. The issue affects Apache Tomcat Native versions from 2.0.0 through 2.0.15 and from 1.3.0 through 1.3.8. Upgrading to versions 1.3.9 or 2.0.16 resolves the vulnerability.

CVE-2026-25294 is a high-severity vulnerability in Qualcomm Snapdragon products involving a buffer over-read (CWE-126) that causes a transient denial of service (DoS) during frame parsing in channel usage. It does not impact confidentiality or integrity but results in availability disruption. The issue affects multiple specific Snapdragon versions. No patch information is provided, and no known exploits are reported in the wild.

CVE-2026-25284 is a high-severity buffer over-read vulnerability in Qualcomm Snapdragon products WSA8840 and WSA8845. It involves information disclosure caused by reuse of a pointer after it has been deallocated. The flaw can lead to unauthorized reading of memory, potentially exposing sensitive data. No known exploits are reported in the wild. The vulnerability requires local privileges and has low attack complexity without user interaction. Confidentiality impact is high, integrity is not affected, and availability impact is low.

CVE-2026-25275 is a high-severity vulnerability in Qualcomm Snapdragon products caused by a buffer over-read (CWE-126) when processing authentication frames with invalid FILS information element header lengths. This flaw can cause a transient denial of service (DoS) condition. The vulnerability affects a wide range of specific Qualcomm Snapdragon versions. No information about available patches or vendor advisories is provided.

CVE-2026-24081 is a high-severity vulnerability in Qualcomm Snapdragon products involving a buffer over-read (CWE-126) that can cause a transient denial of service (DoS). The issue occurs when processing a channel map with insufficient used channels while adaptive frequency hopping is fully enabled. This vulnerability affects numerous specific Qualcomm Snapdragon versions and does not impact confidentiality or integrity but can disrupt availability.

CVE-2026-24075 is a high-severity buffer over-read vulnerability in Qualcomm Snapdragon devices. It occurs due to improper synchronization and race conditions when multiple threads issue concurrent IOCTL requests to the device control handler, leading to memory corruption. This flaw affects specific Snapdragon hardware versions and can result in high impact on confidentiality, integrity, and availability.

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modify VPN configuration information without valid credentials. Successful exploitation may allow a remote unauthenticated attacker to disclose and modify VPN configuration information.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.