Skip to content
OpenAdvisories

Weakness (CWE)

CWE-124: Buffer Underwrite

Base Incomplete

The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.

How to prevent it (2 mitigations)

  1. Requirements

    Choose a language that is not susceptible to these issues.

  2. Implementation

    All calculated values that are used as index or for pointer arithmetic should be validated to ensure that they are within an expected range.

Source: MITRE CWE-124

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2023-25610 Public exploit EPSS 18%

    A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.…

    Fortinet FortiOS FortiProxy FortiManager Network devices
  • High 8.8
    CVE-2015-2426 Exploited Public exploit EPSS 87%

    Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …

    KEV Mar 28, 2022