CWE-124
Buffer Underwrite ('Buffer Underflow')
BaseIncompleteLikelihood: Medium
Description
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (41)
page 3 of 3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-48230 | Med | 0.00 | 5.9 | 0.02 | Nov 21, 2023 | Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression enabled, a buffer underrun can be caused by a remote peer. The underrun always writes a constant value that is not… |
- risk 0.00cvss 5.9epss 0.02
Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression enabled, a buffer underrun can be caused by a remote peer. The underrun always writes a constant value that is not…