Weakness (CWE)
CWE-123: Write-what-where Condition
Base Draft
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
How to prevent it (2 mitigations)
-
Architecture and Design
Use a language that provides appropriate memory abstractions.
-
Operation
Use OS-level preventative functionality integrated after the fact. Not a complete solution.
Source: MITRE CWE-123
3 results · Clear filters · Feed
-
Medium 6.9CVE-2026-25262 Public exploit
Write-what-where Condition in Primary Bootloader
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
-
Medium 5.4CVE-2025-14857 Public exploit
Semtech LR11xx Memory Write Access Control Bypass
An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write protection on the program call stack. An at…
-
Medium 4.6CVE-2025-29943 Public exploit
Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU…