Application Security
CWE-127 Buffer Under-read: Reading Before the Start of a Buffer
A buffer under-read reads memory located before a buffer. See how a decremented pointer causes it, what it can leak, and how to prevent it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1269 Product Released in Non-Release Configuration
Pre-production devices ship with debug hooks that bypass crypto checks. Forget one manufacturing step, and that power reaches customers.
Oct 18, 20262 min read
Application Security
CWE-1268 Inconsistent Control and Write Policy Privileges
When a hardware control policy and a write policy disagree about who may act, an untrusted agent can add itself to the write policy and reach protected resources.
Oct 18, 20262 min read
Application Security
CWE-1267 Policy Uses Obsolete Encoding: Hardware Access Control
SoC access control often relies on a policy encoder that maps bus transactions to security tokens. If the encoding is obsolete, the protection quietly stops working.
Oct 18, 20262 min read
Application Security
CWE-1266 Improper Scrubbing of Decommissioned Device Data
A device taken out of service can still hold keys, credentials and network settings. CWE-1266 covers products that give admins no sound way to wipe them.
Oct 18, 20262 min read
Application Security
CWE-1265 Unintended Reentrant Invocation of Non-reentrant Code
A call you assumed was safe triggers a nested call back into code that cannot handle it. State changes under the first caller's feet, and memory corruption can follow.
Oct 18, 20264 min read
Application Security
CWE-1264 Control and Data Channel De-Synchronization in Hardware
When hardware forwards data before its security check finishes, secrets can leak even if the check later says no. Meltdown is the textbook case.
Oct 18, 20263 min read
Application Security
CWE-1263 Improper Physical Access Control in Product Design
Restricted areas of a product need protection that holds up against someone holding the device. CWE-1263 covers design, testing and manufacturing duties.
Oct 18, 20262 min read
Application Security
CWE-1262 Improper Access Control for Register Interface Explained
Memory-mapped registers are how software drives hardware, and an attack surface. CWE-1262 covers missing access policies and how to verify them before tape-out.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.