CWE-126: Buffer Over-read
Variant
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Consequences
- Confidentiality: Read Memory
- Confidentiality: Bypass Protection Mechanism
- Availability, Integrity: DoS: Crash, Exit, or Restart
Recent advisories
- GHSA-c6hw-5grf-ff96 — Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
- GHSA-4558-3h8r-v8xp — Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
- GHSA-hppc-g8h3-xhp3 — rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer
- GHSA-r99p-5442-q2x2 — ImageMagick has a heap Buffer Over-read in its DJVU image format handler
- GHSA-qpgx-jfcq-r59f — ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
- GHSA-gjf6-3w4p-7xfh — Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
- GHSA-xcf7-rvmh-g6q4 — `openssl` `X509VerifyParamRef::set_host` buffer over-read
- GHSA-jpqr-vh55-xqxf — Apache Tomcat Buffer Over-Read
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor