EUVD-2025-93411

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

PT-2025-46481

Name of the Vulnerable Software and Affected Versions Windows TDX.sys affected versions not specified Description A buffer over-read issue exists in Windows TDX.sys. A local attacker with authorization can exploit this to gain elevated privileges. Recommendations At the moment, there is no...

DEBIAN-CVE-2025-12745

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...

EUVD-2025-37919

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...

QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS, which stems from a buffer over-read in the function jsarraybufferslice in the file quickjs.c, which could lead to a local execution attack...

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47362 Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload...

CVE-2025-47362 Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload...

CVE-2025-27064

CVE-2025-27064 denotes an information-disclosure vulnerability tied to Qualcomm chipsets/ Core Services, caused by a buffer over-read when registering commands from clients via diagHal. The CVE is listed in multiple sources (NVD/NVD-derived entries, Red Hat, CVE List) with a Common exposure in Qu...

CVE-2025-62792

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...

CVE-2025-62792 Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...

CVE-2025-62792

CVE-2025-62792 affects Wazuh prior to 4.12.0, where a buffer over-read occurs in w_expression_match() because the buffer allocated in OS_CleanMSG() is not properly NULL terminated. This allows a compromised agent to trigger a read beyond the end of the allocated buffer by sending a crafted messag...

CLSA-2025-1761744996 Fix CVE(s): CVE-2022-1927, CVE-2022-2042, CVE-2022-2581, CVE-2022-2849

SECURITY UPDATE: Buffer Over-read because of invalid cursor position after "0;" range - debian/patches/CVE-2022-1927.patch: check the cursor position when it was set by ";" in the range - CVE-2022-1927 SECURITY UPDATE: Use After Free in spell command - debian/patches/CVE-2022-2042.patch: initiali...

Wazuh 安全漏洞

Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A security vulnerability exists in Wazuh versions prior to 4.10.2, which stems from a buffer over-read in the...

Linux Distros Unpatched Vulnerability : CVE-2025-11979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorized user may crash the MongoDB server by causing buffer over-read. This can be done by issuing a DDL operation while queries are being issued, under...

CVE-2025-11979

CVE-2025-11979 involves a buffer over-read that can crash MongoDB Server when an authorized user issues a DDL operation while queries are in flight. Affected are MongoDB Server versions: 7.x before 7.0.25, 8.x before 8.0.15, and 8.2.0. Connected sources corroborate the same description across OSV...

CVE-2025-11979 Use-after-free in the MongoDB server query planner may lead to crash or undefined behavior

An authorized user may crash the MongoDB server by causing buffer over-read. This can be done by issuing a DDL operation while queries are being issued, under some conditions. This issue affects MongoDB Server v7.0 versions prior to 7.0.25, MongoDB Server v8.0 versions prior to 8.0.15, and MongoD...

Use-after-free in the MongoDB server query planner may lead to crash or undefined behavior

An authorized user may crash the MongoDB server by causing buffer over-read. This can be done by issuing a DDL operation while queries are being issued, under some conditions. This issue affects MongoDB Server v7.0 versions prior to 7.0.25, MongoDB Server v8.0 versions prior to 8.0.15, and MongoD...

PT-2025-42794

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 7.0.25 MongoDB Server versions prior to 8.0.15 MongoDB Server version 8.2.0 Description An authorized user may crash the MongoDB server by causing a buffer over-read. This can occur by issuing a Data Definition...