CWE-125 — Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Confidentiality→Read Memory
An attacker could get secret values such as cryptographic keys, PII, memory addresses, or other information that could be used in additional attacks.
Confidentiality→Bypass Protection Mechanism
Out-of-bounds memory could contain memory addresses or other information that can be used to bypass ASLR and other protection mechanisms in order to improve the reliability of exploiting a separate weakness for code execution.
Availability→DoS: Crash, Exit, or Restart
An attacker could cause a segmentation fault or crash by causing memory to be read outside of the bounds of the buffer. This is especially likely when the code reads a variable amount of data and assumes that a sentinel exists to stop the r
Other→Varies by Context
The read operation could produce other undefined or unexpected results.

Implementation
[object Object]
Architecture and Design
Use a language that provides appropriate memory abstractions.

CWE-125Out-of-bounds Read