← Back
CWE-124

45 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Buffer Underwrite ('Buffer Underflow')

The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.

JSON object

Loading...

CVEs (45)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-38575
2Insyde
Tianocore
2Edk2
Kernel
Jun 17, 2026
Dec 1, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
CVE-2021-36064
2Adobe
Debian
2Debian Linux
Xmp Toolkit Software Development Kit
Jun 17, 2026
Sep 1, 2021
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac...Show more
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2018-15361
1Uvnc
1Ultravnc
Nov 21, 2024
Mar 5, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been...Show more
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.Show less
CVE-2018-5388
3Canonical
DebianStrongswan
3Debian Linux
StrongswanUbuntu Linux
Jun 17, 2026
May 31, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.
CVE-2015-2426
1Microsoft
9Windows 10
Windows 7Windows 8+6 more
Apr 22, 2026
Jul 20, 2015
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind...Show more
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Driver Vulnerability."Show less