VariantDraft

CWE-126Buffer Over-read

Category: memory

Description

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Common consequences· 3

  • Confidentiality — Read Memory
  • Confidentiality — Bypass Protection Mechanism
    By reading out-of-bounds memory, an attacker might be able to get secret values, such as memory addresses, which can bypass protection mechanisms such as ASLR in order to improve the reliability and likelihood of exploiting a separate weakness to achieve code execution instead of just denial of service.
  • Availability / Integrity — DoS: Crash, Exit, or Restart
    An attacker might be able to cause a crash or other denial of service by causing the product to read a memory location that is not allowed (such as a segmentation fault), or to cause other conditions in which the read operation returns more data than is expected.

References

  1. https://cwe.mitre.org/data/definitions/126.html

(incoming)11

TypeTargetConfidenceTier
VulnerabilityCVE-2025-12106cve-2025-121060%live
VulnerabilityCVE-2025-21176cve-2025-211760%live
VulnerabilityCVE-2025-21427cve-2025-214270%live
VulnerabilityCVE-2025-21484cve-2025-214840%live
VulnerabilityCVE-2025-21487cve-2025-214870%live
VulnerabilityCVE-2025-21488cve-2025-214880%live
VulnerabilityCVE-2025-36855cve-2025-368550%live
VulnerabilityCVE-2025-55081cve-2025-550810%live
VulnerabilityCVE-2026-24028cve-2026-240280%live
VulnerabilityCVE-2026-25646cve-2026-256460%live
VulnerabilityCVE-2026-41898cve-2026-418980%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Buffer Under-read
CWE
Access of Memory Location After End of Buffer
CWE
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE
Integer Overflow to Buffer Overflow
CWE
Buffer Access with Incorrect Length Value
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.