idor cwe

Search for "buffer over read" returns, CWE-126: Buffer Over-read, which is perfect for our case. However, this CVE was mapped to CWE-125, which isn't precise, but it is close enough since it is a parent of CWE-126. This means, if you were using View-1003, you would have selected CWE-125 since CWE-126 isn't there. pap tt cwe