CWE-127—Buffer Under-read
PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11
Metadata
- CWE ID：
- CWE-127
- 摘要：
- Variant
- 结构：
- Simple
- 状态：
- Draft
- 发布日期：
- 2006-07-19
- 更新日期：
- 2025-12-11
描述
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
常见后果
- 范围：
- Confidentiality
- 影响：
- Read Memory
- 范围：
- Confidentiality
- 影响：
- Bypass Protection Mechanism
- 注释：
- By reading out-of-bounds memory, an attacker might be able to get secret values, such as memory addresses, which can bypass protection mechanisms such as ASLR in order to improve the reliability and likelihood of exploiting a separate weakness to achieve code execution instead of just denial of service.