CWE-127 · Memory Corruption
Buffer Under-read
13CVEs
SortMost likely exploited
13 CVEs with CWE-127 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-5360Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulne…Dell · Dell BSAFE Micro Edition Suite · CVSS 7.5 · 2020-12-16 | 7.5 | 2.2% | 2020-12-16 |
| CVE-2020-1918In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue…Facebook · HHVM · 2021-03-10 | – | 1.2% | 2021-03-10 |
| CVE-2025-32050Libsoup: integer overflow in append_param_quotedRedhat · libsoup · CVSS 5.9 · 2025-04-03 | 5.9 | 0.8% | 2025-04-03 |
| CVE-2026-103119Apache Tomcat: AJP response mix-upApache Software Foundation · Apache Tomcat · CVSS 9.1 · 2026-10-20 | 9.1 | 0.6% | 2026-10-20 |
| CVE-2025-20359Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service VulnerabilityCisco · Cisco Cyber Vision · CVSS 6.5 · 2025-10-15 | 6.5 | 0.5% | 2025-10-15 |
| CVE-2026-5928Potential buffer under-read in ungetwcThe GNU C Library · glibc · CVSS 7.5 · 2026-04-20 | 7.5 | 0.4% | 2026-04-20 |
| CVE-2026-110758Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespaceNo vendor recorded · CVSS 7.5 · 2026-10-16 | 7.5 | 0.4% | 2026-10-16 |
| CVE-2024-25629c-ares out of bounds read in ares__read_line()c-ares · c-ares · CVSS 4.4 · 2024-02-23 | 4.4 | 0.4% | 2024-02-23 |
| CVE-2024-10395net: lib: http_server: Buffer Under-readzephyrproject-rtos · Zephyr · CVSS 8.6 · 2025-02-03 | 8.6 | 0.3% | 2025-02-03 |
| CVE-2026-45683OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosureopen-telemetry · opentelemetry-ebpf-instrumentation · CVSS 3.8 · 2026-06-02 | 3.8 | 0.2% | 2026-06-02 |
| CVE-2025-71450inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loopbenhoyt · inih · CVSS 3.3 · 2026-11-02 | 3.3 | 0.1% | 2026-11-02 |
| CVE-2026-125206FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha EncodingFFmpeg · FFmpeg · CVSS 2.5 · 2026-11-09 | 2.5 | 0.1% | 2026-11-09 |
| CVE-2026-125188FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced EncodingFFmpeg · FFmpeg · CVSS 2.5 · 2026-11-09 | 2.5 | 0.1% | 2026-11-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.