Buffer Under-read
CWE-127
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.6.
Latest Buffer Under-read vulnerabilities
- 9.1 Critical severity
Apache Tomcat: Buffer Under-read
Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second reque
- 7.5 High severity
glibc: Buffer Under-read
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes bef
- 9.1 Critical severity
Cisco Cyber Vision: Buffer Under-read
Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection Engine to crash. This vulnerability is du