CWE-125
Overview
- CWE ID
- 125
- CWE Name
- Out-of-bounds Read
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software reads data past the end, or before the beginning, of the intended buffer.
Extended Description
Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. A crash can occur when the code reads a variable amount of data and assumes that a sentinel exists to stop the read operation, such as a NUL i