CWE-124 · 40 kayıt

Buffer Underwrite ('Buffer Underflow')

Bu sınıftaki CVE’ler

40 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
44Planlayın	CVE-2023-25610Kavram kanıtı	A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, versfortinet · fortiweb · CWE-124 pre-auth RCE	Kritik9,8	—	%18,3	24 Mar 2025
40Planlayın	CVE-2018-15361İstismar yok	UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.uvnc · ultravnc · CWE-124 Kimlik doğrulamasız	Kritik9,8	—	%2,9	5 Mar 2019
40Planlayın	CVE-2023-48230İstismar yok	Cap'n Proto WebSocket message can cause crashcapnproto · capnproto · CWE-124 Kimlik doğrulamasız	Kritik9,8	—	%1,9	21 Kas 2023
39İzleyin	CVE-2021-38578İstismar yok	Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.tianocore · edk2 · CWE-124 Kimlik doğrulamasız	Kritik9,8	—	%1,0	3 Mar 2022
39İzleyin	CVE-2025-53101İstismar yok	ImageMagick has Stack Buffer Overflow in image.cimagemagick · imagemagick · CWE-124 Kimlik doğrulamasız	Kritik9,8	—	%0,9	14 Tem 2025
39İzleyin	CVE-2023-32614İstismar yok	A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1.accusoft · imagegear · CWE-124 Kimlik doğrulamasız	Kritik9,8	—	%0,8	25 Eyl 2023
39İzleyin	CVE-2026-44631İstismar yok	Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflowapache · http server · CWE-124 Kimlik doğrulamasız	Kritik9,8	—	%0,7	8 Haz 2026
35İzleyin	CVE-2025-27440İstismar yok	Zoom Apps - Heap-based Buffer Overflowzoom · meeting software development kit · CWE-124	Yüksek8,8	—	%0,4	11 Mar 2025
35İzleyin	CVE-2025-27439İstismar yok	Zoom Apps - Buffer Underflowzoom · meeting software development kit · CWE-124	Yüksek8,8	—	%0,4	11 Mar 2025
34İzleyin	CVE-2022-20683İstismar yok	Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerabilitycisco · ios xe · CWE-124 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%1,5	15 Nis 2022
33İzleyin	CVE-2021-38575İstismar yok	NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.tianocore · edk2 · CWE-124 Kimlik doğrulamasız	Yüksek8,1	—	%2,0	1 Ara 2021
33İzleyin	CVE-2026-71969İstismar yok	OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operationsop-tee · optee_os · CWE-124	Yüksek8,4	—	%0,2	10 Ağu 2026
32İzleyin	CVE-2021-36064İstismar yok	XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflowadobe · xmp toolkit software development kit · CWE-124 RCE	Yüksek7,8	—	%2,7	1 Eyl 2021
32İzleyin	CVE-2026-34253İstismar yok	A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in rCWE-124 Kimlik doğrulamasız	Yüksek8,2	—	%0,7	15 May 2026
32İzleyin	CVE-2026-0966İstismar yok	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()libssh · libssh · CWE-124 Kimlik doğrulamasız	Yüksek8,2	—	%0,6	26 Mar 2026
31İzleyin	CVE-2022-33896İstismar yok	A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files.hancom · hancom office 2020 · CWE-124	Yüksek7,8	—	%0,5	7 Eki 2022
31İzleyin	CVE-2024-52990İstismar yok	Animate \| Buffer Underwrite ('Buffer Underflow') (CWE-124)adobe · animate · CWE-124 RCE Yerel yetki yükseltme	Yüksek7,8	—	%0,4	10 Ara 2024
30İzleyin	CVE-2023-34351İstismar yok	Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of serviintel · performance counter monitor · CWE-124 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,7	14 Şub 2024
30İzleyin	GHSA-5jfw-35xp-5m42İstismar yok	Buffer length underflow in LoginPacket causing unchecked exceptions to be thrownPackagist · pocketmine/bedrock-protocol · CWE-124 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	—	5 Nis 2022
29İzleyin	CVE-2026-5089İstismar yok	YAML::Syck versions before 1.38 for Perl has an out-of-bounds readtoddr · yaml::syck · CWE-124 Kimlik doğrulamasız	Yüksek7,3	—	%0,4	12 May 2026
28İzleyin	CVE-2025-61690İstismar yok	KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.keyence corporation · kv studio · CWE-124 RCE	Yüksek7,1	—	%0,1	2 Eki 2025
27İzleyin	CVE-2018-5388İstismar yok	In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhastrongswan · strongswan · CWE-124 Hizmet dışı bırakma	Orta6,5	—	%4,0	31 May 2018
26İzleyin	CVE-2025-61915İstismar yok	OpenPrinting CUPS vulnerable to stack based out-of-bound writeopenprinting · cups · CWE-124	Orta6,7	—	%0,5	28 Kas 2025
26İzleyin	CVE-2026-41499İstismar yok	Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()wazuh · wazuh · CWE-124 Hizmet dışı bırakma	Orta6,5	—	%0,4	29 Nis 2026
26İzleyin	CVE-2026-28419İstismar yok	Vim has Heap-based Buffer Underflow in Emacs tags parsingvim · vim · CWE-124	Orta6,6	—	%0,2	27 Şub 2026

CVE-2023-25610
44Planlayın
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, vers
KritikCVSS 9,8Kavram kanıtıEPSS %18
- pre-auth RCE
fortinet · fortiweb24 Mar 2025
CVE-2018-15361
40Planlayın
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.
KritikCVSS 9,8İstismar yokEPSS %3
- Kimlik doğrulamasız
uvnc · ultravnc5 Mar 2019
CVE-2023-48230
40Planlayın
Cap'n Proto WebSocket message can cause crash
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
capnproto · capnproto21 Kas 2023
CVE-2021-38578
39İzleyin
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
tianocore · edk23 Mar 2022
CVE-2025-53101
39İzleyin
ImageMagick has Stack Buffer Overflow in image.c
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
imagemagick · imagemagick14 Tem 2025
CVE-2023-32614
39İzleyin
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
accusoft · imagegear25 Eyl 2023
CVE-2026-44631
39İzleyin
Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
apache · http server8 Haz 2026
CVE-2025-27440
35İzleyin
Zoom Apps - Heap-based Buffer Overflow
YüksekCVSS 8,8İstismar yokEPSS %0
zoom · meeting software development kit11 Mar 2025
CVE-2025-27439
35İzleyin
Zoom Apps - Buffer Underflow
YüksekCVSS 8,8İstismar yokEPSS %0
zoom · meeting software development kit11 Mar 2025
CVE-2022-20683
34İzleyin
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe15 Nis 2022
CVE-2021-38575
33İzleyin
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
YüksekCVSS 8,1İstismar yokEPSS %2
- Kimlik doğrulamasız
tianocore · edk21 Ara 2021
CVE-2026-71969
33İzleyin
OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
YüksekCVSS 8,4İstismar yokEPSS %0
op-tee · optee_os10 Ağu 2026
CVE-2021-36064
32İzleyin
XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow
YüksekCVSS 7,8İstismar yokEPSS %3
- RCE
adobe · xmp toolkit software development kit1 Eyl 2021
CVE-2026-34253
32İzleyin
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in r
YüksekCVSS 8,2İstismar yokEPSS %1
- Kimlik doğrulamasız
15 May 2026
CVE-2026-0966
32İzleyin
Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
YüksekCVSS 8,2İstismar yokEPSS %1
- Kimlik doğrulamasız
libssh · libssh26 Mar 2026
CVE-2022-33896
31İzleyin
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files.
YüksekCVSS 7,8İstismar yokEPSS %1
hancom · hancom office 20207 Eki 2022
CVE-2024-52990
31İzleyin
Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
adobe · animate10 Ara 2024
CVE-2023-34351
30İzleyin
Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of servi
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
intel · performance counter monitor14 Şub 2024
GHSA-5jfw-35xp-5m42
30İzleyin
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
YüksekCVSS 7,5İstismar yok
- Kimlik doğrulamasız
- Hizmet dışı bırakma
Packagist · pocketmine/bedrock-protocol5 Nis 2022
CVE-2026-5089
29İzleyin
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
YüksekCVSS 7,3İstismar yokEPSS %0
- Kimlik doğrulamasız
toddr · yaml::syck12 May 2026
CVE-2025-61690
28İzleyin
KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability.
YüksekCVSS 7,1İstismar yokEPSS %0
- RCE
keyence corporation · kv studio2 Eki 2025
CVE-2018-5388
27İzleyin
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exha
OrtaCVSS 6,5İstismar yokEPSS %4
- Hizmet dışı bırakma
strongswan · strongswan31 May 2018
CVE-2025-61915
26İzleyin
OpenPrinting CUPS vulnerable to stack based out-of-bound write
OrtaCVSS 6,7İstismar yokEPSS %0
openprinting · cups28 Kas 2025
CVE-2026-41499
26İzleyin
Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()
OrtaCVSS 6,5İstismar yokEPSS %0
- Hizmet dışı bırakma
wazuh · wazuh29 Nis 2026
CVE-2026-28419
26İzleyin
Vim has Heap-based Buffer Underflow in Emacs tags parsing
OrtaCVSS 6,6İstismar yokEPSS %0
vim · vim27 Şub 2026

Tüm zafiyet sınıfları