CWE-761Variant

Free of Pointer not at Start of Buffer

Incomplete in the CWE catalog · 1 CVE mapped

1
CVEs mapped
8.4
Median CVSS
What it is

The product calls free() on a pointer to a memory resource that was allocated on the heap, but the pointer is not at the start of the buffer.

Recent examples
8.4cvss
CVE-2025-47749

V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function

V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.

HIGHno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-761
Abstraction
Variant
Structure
Simple
Status
Incomplete
References (3)
https://www.boost.org/doc/libs/1_38_0/libs/smart_ptr/smart_ptr.htmhttps://valgrind.org/https://clang.llvm.org/docs/AddressSanitizer.html