CWE-124 · Memory Corruption
Buffer Underwrite
47CVEs
SortMost likely exploited
47 CVEs with CWE-124 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2015-2426In CISA KEVExploitedBuffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,…Microsoft · Windows · CVSS 8.8 · 2015-07-20 | 8.8 | 87% | 2015-07-20 |
| CVE-2023-25610A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0…Fortinet · FortiSwitchManager · CVSS 9.3 · 2025-03-24 | 9.3 | 18% | 2025-03-24 |
| CVE-2018-5388In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while read…strongSwan · strongSwan · 2018-05-31 | – | 3.9% | 2018-05-31 |
| CVE-2018-15361UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network c…UltraVNC · UltraVNC · 2019-03-05 | – | 2.9% | 2019-03-05 |
| CVE-2021-36064XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer UnderflowAdobe · XMP Toolkit · CVSS 7.8 · 2021-09-01 | 7.8 | 2.7% | 2021-09-01 |
| CVE-2021-38575NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.TianoCore · EDK II · 2021-12-01 | – | 2.0% | 2021-12-01 |
| CVE-2023-48230Cap'n Proto WebSocket message can cause crashcapnproto · capnproto · CVSS 5.9 · 2023-11-21 | 5.9 | 1.9% | 2023-11-21 |
| CVE-2022-20683Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2022-04-15 | 8.6 | 1.5% | 2022-04-15 |
| CVE-2021-38578Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.TianoCore · EDK II · CVSS 7.4 · 2022-03-03 | 7.4 | 1.0% | 2022-03-03 |
| CVE-2025-53101ImageMagick has Stack Buffer Overflow in image.cImageMagick · ImageMagick · CVSS 7.4 · 2025-07-14 | 7.4 | 0.9% | 2025-07-14 |
| CVE-2026-40013An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles t…Open-Xchange GmbH · OX Dovecot Pro · CVSS 4.3 · 2026-08-28 | 4.3 | 0.9% | 2026-08-28 |
| CVE-2026-97008Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2026-10-13 | 8.8 | 0.9% | 2026-10-13 |
| CVE-2023-32614A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corrupti…Accusoft · ImageGear · CVSS 7 · 2023-09-25 | 7.0 | 0.8% | 2023-09-25 |
| CVE-2023-34351Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access.Intel · Intel(R) PCM software · CVSS 7.5 · 2024-02-14 | 7.5 | 0.7% | 2024-02-14 |
| CVE-2025-62786Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissionswazuh · wazuh · CVSS 6.3 · 2025-10-29 | 6.3 | 0.7% | 2025-10-29 |
| CVE-2025-4373Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharSiemens · glib · CVSS 4.8 · 2025-05-06 | 4.8 | 0.6% | 2025-05-06 |
| CVE-2026-0966Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()Red Hat · Red Hat Enterprise Linux 10 · CVSS 6.5 · 2026-03-26 | 6.5 | 0.6% | 2026-03-26 |
| CVE-2026-34253A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in t…No vendor recorded · CVSS 8.2 · 2026-05-15 | 8.2 | 0.6% | 2026-05-15 |
| CVE-2022-33896A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memo…Hancom · Hancom Office 2020 · CVSS 7.8 · 2022-10-07 | 7.8 | 0.5% | 2022-10-07 |
| CVE-2026-44631Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowApache Software Foundation · Apache HTTP Server · CVSS 9.8 · 2026-06-08 | 9.8 | 0.5% | 2026-06-08 |
| CVE-2025-27440Zoom Apps - Heap-based Buffer OverflowZoom Communications, Inc · Zoom Workplace Apps · CVSS 8.5 · 2025-03-11 | 8.5 | 0.4% | 2025-03-11 |
| CVE-2025-27439Zoom Apps - Buffer UnderflowZoom Communications, Inc · Zoom Workplace Apps · CVSS 8.5 · 2025-03-11 | 8.5 | 0.4% | 2025-03-11 |
| CVE-2024-52990Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)Adobe · Animate · CVSS 7.8 · 2024-12-10 | 7.8 | 0.4% | 2024-12-10 |
| CVE-2026-16439Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflowEclipse Foundation · OpenJ9 · CVSS 5.8 · 2026-07-21 | 5.8 | 0.4% | 2026-07-21 |
| CVE-2026-5089YAML::Syck versions before 1.38 for Perl has an out-of-bounds readTODDR · YAML::Syck · CVSS 7.3 · 2026-05-12 | 7.3 | 0.4% | 2026-05-12 |
| CVE-2023-31130Buffer Underwrite in ares_inet_net_pton()c-ares · c-ares · CVSS 4.1 · 2023-05-25 | 4.1 | 0.4% | 2023-05-25 |
| CVE-2026-26199Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zeroHDFGroup · hdf5 · CVSS 5.9 · 2026-07-20 | 5.9 | 0.4% | 2026-07-20 |
| CVE-2026-109964ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT DecoderImageMagick · ImageMagick · CVSS 5.6 · 2026-10-13 | 5.6 | 0.3% | 2026-10-13 |
| CVE-2026-12538IBM MQ Appliance is affected by an improper validation vulnerabilityIBM · MQ Appliance · CVSS 5.4 · 2026-11-04 | 5.4 | 0.3% | 2026-11-04 |
| CVE-2026-16179IBM DataPower Gateway Buffer UnderwriteIBM · DataPower Gateway 10.6CD · CVSS 7.5 · 2026-10-08 | 7.5 | 0.3% | 2026-10-08 |
| CVE-2026-110089Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124)Adobe · Premiere · CVSS 7.8 · 2026-11-10 | 7.8 | 0.3% | 2026-11-10 |
| CVE-2026-41499Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()wazuh · wazuh · CVSS 6.5 · 2026-04-29 | 6.5 | 0.3% | 2026-04-29 |
| CVE-2026-125406Ettercap through 0.8.4.1 Stack Buffer Underwrite via Telnet Dissector Backspace HandlingEttercap · ettercap · CVSS 8.8 · 2026-11-09 | 8.8 | 0.2% | 2026-11-09 |
| CVE-2026-121287Security Advisory 0221Arista Networks · EOS · CVSS 8.8 · 2026-11-10 | 8.8 | 0.2% | 2026-11-10 |
| CVE-2020-9086There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validat…Huawei · HUAWEI 4G Router B612 · CVSS 4.3 · 2024-12-27 | 4.3 | 0.2% | 2024-12-27 |
| CVE-2025-68114Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflowcapstone-engine · capstone · CVSS 4.8 · 2025-12-17 | 4.8 | 0.2% | 2025-12-17 |
| CVE-2024-36310Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of co…AMD · AMD EPYC™ 9004 Series Processors · CVSS 4.6 · 2026-02-10 | 4.6 | 0.2% | 2026-02-10 |
| CVE-2026-28419Vim has Heap-based Buffer Underflow in Emacs tags parsingvim · vim · CVSS 5.3 · 2026-02-27 | 5.3 | 0.2% | 2026-02-27 |
| CVE-2024-36343Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited sectio…AMD · AMD EPYC™ 4004 · CVSS 4.6 · 2026-05-19 | 4.6 | 0.2% | 2026-05-19 |
| CVE-2026-71969OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt OperationsOP-TEE · optee_os · CVSS 6.7 · 2026-08-10 | 6.7 | 0.2% | 2026-08-10 |
| CVE-2026-26204Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertDatawazuh · wazuh · CVSS 4.4 · 2026-04-29 | 4.4 | 0.2% | 2026-04-29 |
| CVE-2025-20695In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User in…MediaTek, Inc. · MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8196, MT8678,… · CVSS 6.5 · 2025-07-08 | 6.5 | 0.2% | 2025-07-08 |
| CVE-2025-20694In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User in…MediaTek, Inc. · MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8113,… · CVSS 6.5 · 2025-07-08 | 6.5 | 0.2% | 2025-07-08 |
| CVE-2026-20104A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE93…Cisco · Cisco IOS XE Software · CVSS 6.1 · 2026-03-25 | 6.1 | 0.2% | 2026-03-25 |
| CVE-2026-1485Glib: glib: local denial of service via buffer underflow in content type parsingRed Hat · Red Hat Enterprise Linux 10 · CVSS 2.8 · 2026-01-27 | 2.8 | 0.2% | 2026-01-27 |
| CVE-2025-61690KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.KEYENCE CORPORATION · KV STUDIO · CVSS 7.8 · 2025-10-02 | 7.8 | 0.1% | 2025-10-02 |
| CVE-2026-73075Vim: Out-of-bounds Access in Popup Opacity Handlingvim · vim · CVSS 4.6 · 2026-08-11 | 4.6 | 0.1% | 2026-08-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.