CWE-126

• CWE ID
• 126

• CWE Name
• Buffer Over-read

• CWE Abstraction
• Variant

• CWE structure
• Simple

• CWE Status
• Draft

The software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive