Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46074
HistoryMar 29, 2024 - 7:40 a.m.

Buffer Over-read

2024-03-2907:40:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
stringio vulnerability boundschecking ungetbyte ungetc exposure sensitivedata

6.7 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

stringio is vulnerable to Buffer over-read. The vulnerability is due to improper bounds checking in the ungetbyte and ungetc methods, It allows an attacker to potentially access uninitialized or freed memory content, leading to the exposure of sensitive data.