CWE-125Out-of-bounds Read

Description

Common consequences· 4

• Confidentiality — Read Memory
  An attacker could get secret values such as cryptographic keys, PII, memory addresses, or other information that could be used in additional attacks.
• Confidentiality — Bypass Protection Mechanism
  Out-of-bounds memory could contain memory addresses or other information that can be used to bypass ASLR and other protection mechanisms in order to improve the reliability of exploiting a separate weakness for code execution.
• Availability — DoS: Crash, Exit, or Restart
  An attacker could cause a segmentation fault or crash by causing memory to be read outside of the bounds of the buffer. This is especially likely when the code reads a variable amount of data and assumes that a sentinel exists to stop the read operation, such as a NUL in a string.
• Other — Varies by Context
  The read operation could produce other undefined or unexpected results.

Potential mitigations· 2

• [Implementation]
• [Architecture and Design]Use a language that provides appropriate memory abstractions.

Related CAPEC attack patterns· 1

Exploits (incoming)1

(incoming)149

Showing top 30 of 149 by confidence. Click any target to see the full neighbourhood.

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.