CWE-124 · 44 records

Buffer Underwrite ('Buffer Underflow')

CVEs in this class

44 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2023-25610Proof of concept	A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, versfortinet · fortiweb · CWE-124 pre-auth RCE	Critical9.8	—	18.3%	Mar 24, 2025
40Plan	CVE-2018-15361No exploit	UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.uvnc · ultravnc · CWE-124 Pre-auth	Critical9.8	—	2.8%	Mar 5, 2019
40Plan	CVE-2023-48230No exploit	Cap'n Proto WebSocket message can cause crashcapnproto · capnproto · CWE-124 Pre-auth	Critical9.8	—	1.8%	Nov 21, 2023
39Monitor	CVE-2021-38578No exploit	Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.tianocore · edk2 · CWE-124 Pre-auth	Critical9.8	—	1.0%	Mar 3, 2022
39Monitor	CVE-2025-53101No exploit	ImageMagick has Stack Buffer Overflow in image.cimagemagick · imagemagick · CWE-124 Pre-auth	Critical9.8	—	0.9%	Jul 14, 2025
39Monitor	CVE-2023-32614No exploit	A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1.accusoft · imagegear · CWE-124 Pre-auth	Critical9.8	—	0.8%	Sep 25, 2023
39Monitor	CVE-2026-44631No exploit	Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflowapache · http server · CWE-124 Pre-auth	Critical9.8	—	0.7%	Jun 8, 2026
35Monitor	CVE-2026-97008No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-124 pre-auth RCE	High8.8	—	0.7%	Oct 13, 2026
35Monitor	CVE-2025-27440No exploit	Zoom Apps - Heap-based Buffer Overflowzoom · meeting software development kit · CWE-124	High8.8	—	0.4%	Mar 11, 2025
35Monitor	CVE-2025-27439No exploit	Zoom Apps - Buffer Underflowzoom · meeting software development kit · CWE-124	High8.8	—	0.4%	Mar 11, 2025
34Monitor	CVE-2022-20683No exploit	Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerabilitycisco · ios xe · CWE-124 Pre-auth Denial of service	High8.6	—	1.4%	Apr 15, 2022
33Monitor	CVE-2021-38575No exploit	NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.tianocore · edk2 · CWE-124 Pre-auth	High8.1	—	1.9%	Dec 1, 2021
33Monitor	CVE-2026-71969No exploit	OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operationsop-tee · optee_os · CWE-124	High8.4	—	0.1%	Aug 10, 2026
32Monitor	CVE-2021-36064No exploit	XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflowadobe · xmp toolkit software development kit · CWE-124 RCE	High7.8	—	2.7%	Sep 1, 2021
32Monitor	CVE-2026-0966No exploit	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()libssh · libssh · CWE-124 Pre-auth	High8.2	—	0.5%	Mar 26, 2026
32Monitor	CVE-2026-34253No exploit	A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in rCWE-124 Pre-auth	High8.2	—	0.5%	May 15, 2026
31Monitor	CVE-2022-33896No exploit	A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files.hancom · hancom office 2020 · CWE-124	High7.8	—	0.5%	Oct 7, 2022
31Monitor	CVE-2024-52990No exploit	Animate \| Buffer Underwrite ('Buffer Underflow') (CWE-124)adobe · animate · CWE-124 RCE Local privilege escalation	High7.8	—	0.4%	Dec 10, 2024
30Monitor	CVE-2023-34351No exploit	Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of serviintel · performance counter monitor · CWE-124 Pre-auth Denial of service	High7.5	—	0.7%	Feb 14, 2024
30Monitor	CVE-2026-16179No exploit	IBM DataPower Gateway Buffer Underwriteibm · datapower gateway · CWE-124 Pre-auth Denial of service	High7.5	—	0.3%	Oct 8, 2026
30Monitor	GHSA-5jfw-35xp-5m42No exploit	Buffer length underflow in LoginPacket causing unchecked exceptions to be thrownPackagist · pocketmine/bedrock-protocol · CWE-124 Pre-auth Denial of service	High7.5	—	—	Apr 5, 2022
29Monitor	CVE-2026-5089No exploit	YAML::Syck versions before 1.38 for Perl has an out-of-bounds readtoddr · yaml::syck · CWE-124 Pre-auth	High7.3	—	0.4%	May 12, 2026
28Monitor	CVE-2025-61690No exploit	KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.keyence corporation · kv studio · CWE-124 RCE	High7.1	—	0.1%	Oct 2, 2025
27Monitor	CVE-2018-5388No exploit	In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhastrongswan · strongswan · CWE-124 Denial of service	Medium6.5	—	3.9%	May 31, 2018
26Monitor	CVE-2025-61915No exploit	OpenPrinting CUPS vulnerable to stack based out-of-bound writeopenprinting · cups · CWE-124	Medium6.7	—	0.4%	Nov 29, 2025

CVE-2023-25610
44Plan
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, vers
CriticalCVSS 9.8Proof of conceptEPSS 18%
- pre-auth RCE
fortinet · fortiwebMar 24, 2025
CVE-2018-15361
40Plan
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
uvnc · ultravncMar 5, 2019
CVE-2023-48230
40Plan
Cap'n Proto WebSocket message can cause crash
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
capnproto · capnprotoNov 21, 2023
CVE-2021-38578
39Monitor
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
tianocore · edk2Mar 3, 2022
CVE-2025-53101
39Monitor
ImageMagick has Stack Buffer Overflow in image.c
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
imagemagick · imagemagickJul 14, 2025
CVE-2023-32614
39Monitor
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
accusoft · imagegearSep 25, 2023
CVE-2026-44631
39Monitor
Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
apache · http serverJun 8, 2026
CVE-2026-97008
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · 365 appsOct 13, 2026
CVE-2025-27440
35Monitor
Zoom Apps - Heap-based Buffer Overflow
HighCVSS 8.8No exploitEPSS 0%
zoom · meeting software development kitMar 11, 2025
CVE-2025-27439
35Monitor
Zoom Apps - Buffer Underflow
HighCVSS 8.8No exploitEPSS 0%
zoom · meeting software development kitMar 11, 2025
CVE-2022-20683
34Monitor
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 1%
- Pre-auth
- Denial of service
cisco · ios xeApr 15, 2022
CVE-2021-38575
33Monitor
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
tianocore · edk2Dec 1, 2021
CVE-2026-71969
33Monitor
OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
HighCVSS 8.4No exploitEPSS 0%
op-tee · optee_osAug 10, 2026
CVE-2021-36064
32Monitor
XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow
HighCVSS 7.8No exploitEPSS 2%
- RCE
adobe · xmp toolkit software development kitSep 1, 2021
CVE-2026-0966
32Monitor
Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
libssh · libsshMar 26, 2026
CVE-2026-34253
32Monitor
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in r
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
May 15, 2026
CVE-2022-33896
31Monitor
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files.
HighCVSS 7.8No exploitEPSS 0%
hancom · hancom office 2020Oct 7, 2022
CVE-2024-52990
31Monitor
Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
adobe · animateDec 10, 2024
CVE-2023-34351
30Monitor
Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of servi
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
intel · performance counter monitorFeb 14, 2024
CVE-2026-16179
30Monitor
IBM DataPower Gateway Buffer Underwrite
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · datapower gatewayOct 8, 2026
GHSA-5jfw-35xp-5m42
30Monitor
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
Packagist · pocketmine/bedrock-protocolApr 5, 2022
CVE-2026-5089
29Monitor
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
toddr · yaml::syckMay 12, 2026
CVE-2025-61690
28Monitor
KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.
HighCVSS 7.1No exploitEPSS 0%
- RCE
keyence corporation · kv studioOct 2, 2025
CVE-2018-5388
27Monitor
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exha
MediumCVSS 6.5No exploitEPSS 3%
- Denial of service
strongswan · strongswanMay 31, 2018
CVE-2025-61915
26Monitor
OpenPrinting CUPS vulnerable to stack based out-of-bound write
MediumCVSS 6.7No exploitEPSS 0%
openprinting · cupsNov 29, 2025

All vulnerability classes