CWE-126 Buffer Over-read

Tornado has out-of-bounds memory access via C extension

OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function

diesel-async may expose uninitialized padding bytes for MySQL temporal columns

rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer

fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

StringIO buffer overread vulnerability

`openssl` `X509VerifyParamRef::set_host` buffer over-read

Duplicate Advisory: `openssl` `X509VerifyParamRef::set_host` buffer over-read

Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability

Apache Tomcat Buffer Over-Read

Remote Memory Exposure in bl

Improper Input Validation and Buffer Over-read in mqtt-packet