CWE-125

GPTKB entity

Statements (21)
Predicate Object
gptkbp:instance_of gptkb:Common_Weakness_Enumeration
gptkbp:affects Software security.
gptkbp:associated_with Memory corruption.
gptkbp:can_lead_to Buffer overflow vulnerabilities.
gptkbp:category Data Validation
gptkbp:description The software reads data past the end of a buffer or before the beginning of a buffer.
gptkbp:difficulty_levels gptkb:High
gptkbp:example Accessing an array element outside its defined range.
gptkbp:example_vulnerable_code char buffer[10]; strcpy(buffer, user Input);
gptkbp:example_vulnerable_function strcpy.
https://www.w3.org/2000/01/rdf-schema#label CWE-125
gptkbp:impact Information Disclosure
gptkbp:is_common_in C/ C++ programming languages.
gptkbp:is_vulnerable_to Attackers.
gptkbp:name Out-of-bounds Read
gptkbp:prevention Implement bounds checking.
Use safe libraries.
gptkbp:related_to gptkb:CWE-119
gptkb:CWE-130
gptkbp:bfsParent gptkb:JEP_413
gptkbp:bfsLayer 6