CWE-127: Buffer Under-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
A kind of CWE-786 Access of Memory Location Before Start of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- benhoyt inih inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop 4.8 Medium
- apache software foundation tomcat Apache Tomcat: AJP response mix-up 9.1 Critical
-
libtext-csv-xs-perlDebian,perl-Text-CSV_XSAzure Linux +1 more Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace 7.5 High - opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 more OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure 3.8 Low
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Potential buffer under-read in ungetwc 7.5 High
- cisco snort, cyber vision, secure firewall threat defense (ftd) software +1 more +3 more Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability 6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 more Libsoup: integer overflow in append_param_quoted 5.9 Medium
- zephyrproject zephyr net: lib: http_server: Buffer Under-read 8.6 High
- c-ares, fedoraproject fedora +1 more c-ares out of bounds read in ares__read_line() 4.4 Medium
- cloudflare workerd Buffer under-read in workerd 6.5 Medium
- facebook hhvm In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative... 7.5 High
- dell bsafe micro edition suite, bsafe micro-edition-suite, oracle database +3 more +5 more Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read... 7.5 High