VariantDraft

CWE-127Buffer Under-read

Category: memory

Description

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.

Common consequences· 2

  • Confidentiality — Read Memory
  • Confidentiality — Bypass Protection Mechanism
    By reading out-of-bounds memory, an attacker might be able to get secret values, such as memory addresses, which can bypass protection mechanisms such as ASLR in order to improve the reliability and likelihood of exploiting a separate weakness to achieve code execution instead of just denial of service.

References

  1. https://cwe.mitre.org/data/definitions/127.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Buffer Over-read
CWE
Access of Memory Location After End of Buffer
CWE
Buffer Underwrite ('Buffer Underflow')
CWE
Access of Memory Location Before Start of Buffer
CWE
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.