CVEbaza.pl › CWE Dictionary › CWE-761
Common Weakness Enumeration

CWE-761

Free of Pointer not at Start of Buffer

Category: VariantCVE: 2
Description

The product calls free() on a pointer to a memory resource that was allocated on the heap, but the pointer is not at the start of the buffer.

CVE vulnerabilities with CWE-761 (2)
8.4
CVSS
HIGH
CVE-2025-47749

V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.

pub. 2025-05-19
5.9
CVSS
MEDIUM
CVE-2024-31413

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

pub. 2024-05-01
Information
ID: CWE-761
Type: Variant
Vulnerabilities: 2
MITRE CWE ↗
← CWE Dictionary
CWE-761 — Free of Pointer not at Start of Buffer | CWE Dictionary | CVEbaza.pl