CWE-124

CWE-124 · 4 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-124, highest CVSS first.

  1. HIGH 8.8CVE-2026-970082026-10-13

    Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.5CVE-2026-161792026-10-08

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.9CVE-2026-109448public PoC2026-10-12

    Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.6CVE-2026-109964public PoC2026-10-13

    ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-l…

    AI risk analysis on Exploit-DB.ai →