目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

CWE-127 缓冲区下溢读取 类漏洞列表 7

CWE-127 缓冲区下溢读取 类弱点 7 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-127 缓冲区下读漏洞指程序通过索引或指针访问目标缓冲区之前的内存区域。攻击者常利用此缺陷读取敏感数据或引发程序崩溃，从而破坏系统完整性与可用性。开发者应避免使用未经验证的偏移量，确保内存访问边界合法，并实施严格的输入验证与指针算术检查，以防止越界读取行为。

MITRE CWE 官方描述
CWE：CWE-127 Buffer Under-read 英文：The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
常见影响 (2)
ConfidentialityRead Memory
ConfidentialityBypass Protection Mechanism
By reading out-of-bounds memory, an attacker might be able to get secret values, such as memory addresses, which can bypass protection mechanisms such as ASLR in order to improve the reliability and likelihood of exploiting a separate weakness to achieve code execution instead of just denial of serv…
代码示例 (1)
In the following code, the method retrieves a value from an array at a specific array index location that is given as an input parameter to the method
int getValueFromArray(int *array, int len, int index) { int value; // check that the array index is less than the maximum // length of the array if (index < len) { // get the value at the specified index of the array value = array[index]; } // if array index is invalid then output error message // and return value indicating error else { printf("Value is: %d\n", array[index]); value = -1; } return value; }
Bad · C
... // check that the array index is within the correct // range of values for the array if (index >= 0 && index < len) { ...
Good · C
CVE ID标题CVSS风险等级Published
CVE-2026-5928 GNU C Library 安全漏洞 — glibc 9.1AICriticalAI2026-04-20
CVE-2025-20359 Cisco IOS XE Software 安全漏洞 — Cisco Cyber Vision 6.5 Medium2025-10-15
CVE-2025-32050 libsoup 安全漏洞 5.9 Medium2025-04-03
CVE-2024-10395 Zephyr 安全漏洞 — Zephyr 8.6 High2025-02-03
CVE-2024-25629 c-ares 安全漏洞 — c-ares 4.4 Medium2024-02-23
CVE-2020-1918 Katy Voor HHVM 缓冲区错误漏洞 — HHVM 7.5 -2021-03-10
CVE-2020-5360 Dell BSAFE Micro Edition Suite 缓冲区错误漏洞 — Dell BSAFE Micro Edition Suite 7.5 High2020-12-16

CWE-127（缓冲区下溢读取） 是常见的弱点类别，本平台收录该类弱点关联的 7 条 CVE 漏洞。