Advisories · Weakness
CWE-127.
Every Advisory and CVE whose sources give the weakness CWE-127, newest first.
- CVSS 4.8 Medium
inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
- benhoyt inih
- CWE-127
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Tomcat: AJP response mix-up
- Apache Software Foundation Apache Tomcat
- CWE-127
- CVSS 7.5 High
Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace
- CWE-127
- CVSS 3.8 Low
OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure
- Information disclosure
- CWE-127
<0.9.0 · fixed in 0.9.0
GHSA-fjq3-ffvr-vm46 · CVE-2026-45683 - CVSS 7.5 High
Potential buffer under-read in ungetwc
- The GNU C Library glibc
- CWE-127
- CVSS 6.5 Medium
Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability
- Cisco Cyber Vision
- Cisco Secure Firewall Threat Defense (FTD) Software
- CWE-127
- CVSS 5.9 Medium
Libsoup: integer overflow in append_param_quoted
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.8 Extended Update Support
- CWE-127
- CVSS 8.6 High
net: lib: http_server: Buffer Under-read
- Zephyr
- CWE-127
- CVSS 4.4 Medium
c-ares out of bounds read in ares__read_line()
- c-ares
- CWE-127
- CVSS 6.5 Medium
Buffer under-read in workerd
- Memory corruption
- CWE-127
<1.20230419.0 · fixed in 1.20230419.0
GHSA-8vx6-69vg-c46f · CVE-2023-2512 -
Facebook HHVM: In-memory file operations (ie: using fopen on a data URI) did not properly restrict…
- Facebook HHVM
- CWE-127
- CVSS 7.5 High
Dell BSAFE Micro Edition Suite: Dell BSAFE Micro Edition Suite, versions prior to 4.5…
- Dell BSAFE Micro Edition Suite
- CWE-127