327
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 787 Out-of-bounds Write 1661
ChildOf 786 Access of Memory Location Before Start of Buffer 1658
CanFollow 839 Numeric Range Comparison Without Minimum Check 1767
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1218 Memory Buffer Errors 2479
Weakness Ordinalities
Primary :
Applicable Platforms
Language : C (Prevalence = Undetermined)
Language : C++ (Prevalence = Undetermined)
Alternate Terms
buffer underrun : Some prominent vendors and researchers use the term "buffer underrun".
"Buffer underflow" is more commonly used, although both terms are also sometimes used to
describe a buffer under-read (CWE-127).
Likelihood Of Exploit
Medium
Common Consequences
Scope Impact Likelihood
Integrity
Availability
Modify Memory
DoS: Crash, Exit, or Restart
Out of bounds memory access will very likely result in the
corruption of relevant memory, and perhaps instructions,
possibly leading to a crash.
Integrity
Confidentiality
Availability
Access Control
Other
Execute Unauthorized Code or Commands
Modify Memory
Bypass Protection Mechanism
Other
If the corrupted memory can be effectively controlled, it
may be possible to execute arbitrary code. If the corrupted
memory is data rather than instructions, the system will
continue to function with improper changes, possibly in
violation of an implicit or explicit policy. The consequences
would only be limited by how the affected data is used,
such as an adjacent memory location that is used to
specify whether the user has special privileges.
Access Control
Other
Bypass Protection Mechanism
Other
CWE Version 4.14
CWE-124: Buffer Underwrite ('Buffer Underflow')
CWE-124: Buffer Underwrite ('Buffer Underflow')