CWE-788Access of Memory Location After End of Buffer

Abstraction: Base · CVEs in our corpus: 147

The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.

This typically occurs when a pointer or its index is incremented to a position after the buffer; or when pointer arithmetic results in a position after the buffer.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SI-10 Information Input Validation
SI-16 Memory Protection

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

V1.4.1

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2019-8280`	7.9	9.8	0.0425	2019-03-08
`CVE-2019-8264`	7.8	9.8	0.0313	2019-03-08
`CVE-2019-8265`	7.8	9.8	0.0314	2019-03-08
`CVE-2019-8266`	7.8	9.8	0.0284	2019-03-08
`CVE-2021-27384`	7.7	9.8	0.0256	2021-05-12
`CVE-2021-21104`	7.2	8.8	0.0487	2021-09-08
`CVE-2021-21105`	7.2	8.8	0.0592	2021-09-08
`CVE-2020-9731`	6.8	7.8	0.1129	2020-09-10
`CVE-2021-21082`	6.5	7.8	0.0448	2021-03-12
`CVE-2020-9727`	6.4	7.8	0.0311	2020-09-10
`CVE-2021-21092`	6.4	7.8	0.0393	2021-04-15
`CVE-2021-21093`	6.4	7.8	0.0393	2021-04-15
`CVE-2021-36052`	6.4	7.8	0.0323	2021-09-01
`CVE-2020-9728`	6.3	7.8	0.0271	2020-09-10
`CVE-2020-9729`	6.3	7.8	0.0271	2020-09-10
`CVE-2020-9730`	6.3	7.8	0.0271	2020-09-10
`CVE-2020-24412`	6.3	7.8	0.0280	2020-10-20
`CVE-2020-24413`	6.3	7.8	0.0280	2020-10-20
`CVE-2020-24414`	6.3	7.8	0.0280	2020-10-20
`CVE-2020-24415`	6.3	7.8	0.0267	2020-10-20
`CVE-2021-35997`	6.3	7.8	0.0288	2021-08-20
`CVE-2021-35999`	6.3	7.8	0.0243	2021-08-20
`CVE-2021-36000`	6.3	7.8	0.0226	2021-08-20
`CVE-2021-36009`	6.3	7.8	0.0298	2021-08-20
`CVE-2021-36015`	6.3	7.8	0.0255	2021-08-20