Weakness (CWE)
CWE-124: Buffer Underwrite
Base Incomplete
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
How to prevent it (2 mitigations)
-
Requirements
Choose a language that is not susceptible to these issues.
-
Implementation
All calculated values that are used as index or for pointer arithmetic should be validated to ensure that they are within an expected range.
Source: MITRE CWE-124
1 result · Clear filters · Feed
-
Low 2.8
Glib: glib: local denial of service via buffer underflow in content type parsing
A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow …