CWE-127 · weakness in Memory Corruption
Buffer Under-read
13 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.
- Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulne…
- In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue…
- Libsoup: integer overflow in append_param_quoted
- Apache Tomcat: AJP response mix-up
- Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability
- Potential buffer under-read in ungetwc
- Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace
- c-ares out of bounds read in ares__read_line()
- net: lib: http_server: Buffer Under-read
- OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure
- inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
- FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha Encoding
- FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced Encoding
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.