CVE-2024-31081

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

CVE-2024-31080

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

CVE-2024-3205

A flaw was found in the libyaml library. A specially crafted YAML file can cause a heap-based buffer over-read in the yamlemitteremitflowsequenceitem function in the src/emitter.c file, resulting in denial of service in the application linked to the library. Mitigation Applications that do not...

CVE-2024-30166

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read of less than 256 bytes in a TLS 1.3 server via a TLS 3.1 ClientHello...

CVE-2024-30166

CVE-2024-30166 affects the Mbed TLS library. Affected versions: 3.3.0 through 3.5.2 prior to 3.6.0. The issue is a stack buffer over-read (less than 256 bytes) in a TLS 1.3 server when handling a TLS 3.1 ClientHello, enabling information disclosure or a denial of service. Impact (as stated): info...

CVE-2024-30166

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read of less than 256 bytes in a TLS 1.3 server via a TLS 3.1 ClientHello...

PT-2024-23220 · Mbed Tls · Mbed Tls

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions 3.3.0 through 3.5.2 Description: A malicious client can cause information disclosure or a denial of service due to a stack buffer over-read in a TLS 1.3 server via a TLS 3.1 ClientHello. This occurs because of a buffer...

CVE-2023-33115 Buffer Over-read in Trusted Execution Environment

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated...

CVE-2023-33115 Buffer Over-read in Trusted Execution Environment

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated...

Buffer Over-read

libzephyr.so is vulnerable to Buffer Over-read. The vulnerability is due to a flaw in the handling of malformed GATT packets by the BLE victim device when communicating with a malicious BLE device. This flaw allows the malicious BLE device to crash the victim device...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-45919

CVE-2023-45919 refers to Mesa 23.0.4, which contains a buffer over-read in glXQueryServerString(). The entry notes this is disputed and does not detail exploit vectors. Public records in connected sources confirm remediation: SUSE/SUSE-SU-2025:02803-1 and related advisories indicate Mesa fixes in...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

PT-2024-13301 · Mesa +2 · Mesa +2

Name of the Vulnerable Software and Affected Versions: Mesa version 23.0.4 Description: A buffer over-read was discovered in the glXQueryServerString function. This issue is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controlled...

BIT-PILLOW-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

BIT-RUBY-2022-28739

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including KernelFloat and Stringtof...