Systems & Memory
Out-of-Bounds Read
Also: buffer over-read, CWE-125
Reading memory beyond the end of the block a program was meant to use, leaking whatever sits next to it.
In more detail
Unlike an overflow it changes nothing, but it exposes confidential data such as keys and passwords. Heartbleed was an out-of-bounds read; it is classified as CWE-125.
