Umbra Wiki weakness weakness/CWE-126
Back to wiki

CWE-126 — Buffer Over-read

provenance: imported · CWE: CWE-126

CWE-126: Buffer Over-read

MITRE CWE weakness

Kind Weakness
Abstraction Variant
Status Draft
Likelihood of exploit

Description

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Common consequences

  • Confidentiality: Read Memory
  • Confidentiality: Bypass Protection Mechanism
  • Availability, Integrity: DoS: Crash, Exit, or Restart

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/126.html
  • CWE list: https://cwe.mitre.org/data/index.html