CWE-127: Buffer Under-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.

What the weakness is: CWE-127 at MITRE. All weaknesses

1. 2.0CVE-2026-125206EPSS 0.1%2026-11-09

   FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder's get_alpha_data() that reads before the blocks buffer for interlaced frames with odd heights. Attackers can supply video with alpha and odd height …

2. 2.0CVE-2026-125188EPSS 0.1%2026-11-09

   FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in libavcodec/proresenc_anatoliy.c that occurs when the prores_aw encoder processes interlaced, odd-height frames. Attackers can supply odd-height video that causes subi…

3. 4.8CVE-2025-71450EPSS 0.1%2026-11-02

   inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to read abyss[-1] via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of a…

4. 9.1CVE-2026-103119EPSS 0.6%2026-10-20

   Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failur…

5. 7.5CVE-2026-110758EPSS 0.4%2026-10-16

   Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace. Under allow_whitespace, strip_trail_whitespace removes trailing spaces and tabs from each unquoted fi…

6. 3.8CVE-2026-45683EPSS 0.2%2026-06-02

   OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioctl pointers with bpf_probe_read instead of bpf_probe_read_user.…

7. 7.5CVE-2026-5928EPSS 0.4%2026-04-20

   Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an atte…

8. 9.1CVE-2025-20359EPSS 0.5%2025-10-15

   Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection Engine to crash. …

9. 5.9CVE-2025-32050EPSS 0.8%2025-04-03

   A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.

10. 7.5CVE-2024-10395EPSS 0.3%2025-02-03

    No proper validation of the length of user input in http_server_get_content_type_from_extension.

11. 5.5CVE-2024-25629EPSS 0.4%2024-02-23

    c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, th…

12. 7.5CVE-2020-1918EPSS 1.2%2021-03-10

    In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between …

13. 7.5CVE-2020-5360EPSS 2.2%2020-12-16

    Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the…