Weakness (CWE)
CWE-124: Buffer Underwrite
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
How to prevent it (2 mitigations)
-
Requirements
Choose a language that is not susceptible to these issues.
-
Implementation
All calculated values that are used as index or for pointer arithmetic should be validated to ensure that they are within an expected range.
Source: MITRE CWE-124
18 results · Clear filters · Feed
-
High 7.8
Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124)
Premiere Pro is affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this i…
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.5
IBM DataPower Gateway Buffer Underwrite
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service.
-
High 8.2
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in funct…
-
High 7.3
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When processing the leftmost segment of a colon-separated value (…
-
High 7.8
KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a specially crafted fi…
-
High 7.4
ImageMagick has Stack Buffer Overflow in image.c
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive `%d` format specifiers in a filename template…
-
High 8.5
Zoom Apps - Heap-based Buffer Overflow
Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
-
High 8.5
Zoom Apps - Buffer Underflow
Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
-
High 7.8
Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)
Animate versions 23.0.8, 24.0.5 and earlier are affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to manipulate me…
-
High 7.5
Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially e…
-
High 7.0
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A …
-
High 7.8
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based off…
-
High 8.6
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability
A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affecte…
-
High 7.5
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
### Impact `LoginPacket` uses `BinaryStream->getLInt()` to read the lengths of JSON payloads it wants to decode. Unfortunately, `BinaryStream->getLInt()` returns a signed integer, meaning that a malicious client can craft a packet with a large uint32 value fo…
-
High 7.4
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
-
High 7.8
XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malic…
-
High 8.8
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …
KEV Mar 28, 2022