Weakness (CWE)
CWE-124: Buffer Underwrite
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
How to prevent it (2 mitigations)
-
Requirements
Choose a language that is not susceptible to these issues.
-
Implementation
All calculated values that are used as index or for pointer arithmetic should be validated to ensure that they are within an expected range.
Source: MITRE CWE-124
48 results · Feed
-
High 8.6
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability
A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affecte…
-
High 7.5
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
### Impact `LoginPacket` uses `BinaryStream->getLInt()` to read the lengths of JSON payloads it wants to decode. Unfortunately, `BinaryStream->getLInt()` returns a signed integer, meaning that a malicious client can craft a packet with a large uint32 value fo…
-
High 7.4
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
-
Unscored —
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
-
High 7.8
XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malic…
-
Unscored —
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code ex…
-
Unscored —
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may …
-
High 8.8
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …
KEV Mar 28, 2022