An out-of-bounds read can allow an attacker to read memory contents beyond the intended buffer during SNMP processing. This flaw is a pre-authentication vulnerability, meaning an attacker does not need valid credentials to trigger it. The resulting information disclosure may reveal sensitive configuration or application data, potentially leading to further exploitation if the attacker can combine the disclosed information with additional weaknesses.

Keil MDK-Middleware versions 8.0.0 through 8.3.0 are affected. The vulnerability applies to any deployment of this middleware that processes SNMP requests.

The CVSS score is 5.3, indicating moderate severity, and the EPSS score is unavailable, so the likelihood of exploitation cannot be precisely quantified. The vulnerability is not listed in the CISA KEV catalog, which suggests lower exposure, yet it remains a serious flaw due to potential information disclosure. The attack vector is inferred to be local or remote if SNMP is exposed to untrusted peers; any device running the affected middleware and exposing SNMP may be susceptible.