CWE-122: Heap-based Buffer Overflow, page 49

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 7.5CVE-2025-21171EPSS 1.7%2025-01-14

   .NET Remote Code Execution Vulnerability

2. 5.5CVE-2025-22134EPSS 0.4%2025-01-13

   When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a b…

3. 5.6CVE-2024-56827EPSS 0.3%2025-01-09

   A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

4. 5.6CVE-2024-56826EPSS 0.3%2025-01-09

   A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

5. 7.0CVE-2024-51737EPSS 0.4%2025-01-08

   RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH with a s…

6. 7.0CVE-2024-51480EPSS 0.2%2025-01-08

   RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an in…

7. 7.5CVE-2024-55627EPSS 1.0%2025-01-06

   Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during in…

8. 7.8CVE-2024-13051EPSS 0.3%2024-12-30

   Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interact…

9. 7.8CVE-2024-13050EPSS 0.3%2024-12-30

   Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interact…

10. 8.8CVE-2024-56737EPSS 0.7%2024-12-29

    GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

11. 9.3CVE-2024-56732EPSS 0.7%2024-12-27

    HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function.

12. 7.5CVE-2020-12819EPSS 0.8%2024-12-19

    A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VP…

13. 7.8CVE-2024-12670EPSS 0.3%2024-12-17

    A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitra…

14. 7.8CVE-2024-12669EPSS 0.3%2024-12-17

    A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitra…

15. 7.8CVE-2024-12179EPSS 0.3%2024-12-17

    A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitra…

16. 9.3CVE-2024-49775EPSS 1.5%2024-12-16

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS…

17. 6.5CVE-2024-8798EPSS 0.4%2024-12-16

    No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.

18. 6.9CVE-2024-52059EPSS 0.2%2024-12-13

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue …

19. 7.8CVE-2024-49138KEVExploitEPSS 26%2024-12-12

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

20. 8.8CVE-2024-49125EPSS 1.5%2024-12-12

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

21. 8.8CVE-2024-49104EPSS 1.7%2024-12-12

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

22. 8.8CVE-2024-49102EPSS 1.7%2024-12-12

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

23. 6.6CVE-2024-49094EPSS 0.8%2024-12-12

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

24. 7.2CVE-2024-49089EPSS 2.1%2024-12-12

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

25. 8.8CVE-2024-49086EPSS 1.6%2024-12-12

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

26. 8.8CVE-2024-49085EPSS 1.6%2024-12-12

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

27. 6.6CVE-2024-49081EPSS 0.8%2024-12-12

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

28. 8.8CVE-2024-49080EPSS 1.7%2024-12-12

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

29. 7.8CVE-2024-49072EPSS 0.6%2024-12-12

    Windows Task Scheduler Elevation of Privilege Vulnerability

30. 7.8CVE-2024-53957EPSS 0.5%2024-12-10

    Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

31. 7.8CVE-2024-53956EPSS 0.5%2024-12-10

    Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…

32. 7.8CVE-2024-52999EPSS 0.5%2024-12-10

    Substance3D - Modeler versions 1.14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

33. 7.8CVE-2024-52996EPSS 0.4%2024-12-10

    Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact…

34. 7.8CVE-2024-52995EPSS 0.4%2024-12-10

    Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact…

35. 7.8CVE-2024-49545EPSS 0.4%2024-12-10

    InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

36. 7.8CVE-2024-49552EPSS 0.4%2024-12-10

    Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

37. 7.3CVE-2024-54094EPSS 0.2%2024-12-10

    A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to exec…

38. 7.3CVE-2024-54093EPSS 0.2%2024-12-10

    A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted ASM files. This could allow an attacker to exec…

39. 7.8CVE-2024-11608EPSS 0.2%2024-12-09

    A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in …

40. 7.5CVE-2024-40763EPSS 0.9%2024-12-05

    Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution.

41. 7.8CVE-2024-11933EPSS 0.3%2024-11-28

    Fuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. …

42. 8.2CVE-2024-11233EPSS 1.6%2024-11-24

    In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crash…

43. 7.8CVE-2024-8025EPSS 0.3%2024-11-22

    Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User int…

44. 7.8CVE-2024-7508EPSS 0.4%2024-11-22

    Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User intera…

45. 7.8CVE-2024-9743EPSS 0.3%2024-11-22

    Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF.…

46. 7.8CVE-2024-9742EPSS 0.3%2024-11-22

    Tungsten Automation Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF.…

47. 7.8CVE-2024-9741EPSS 0.3%2024-11-22

    Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF.…

48. 7.8CVE-2024-9734EPSS 0.3%2024-11-22

    Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF.…

49. 7.8CVE-2024-11580EPSS 0.4%2024-11-22

    Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required …

50. 7.8CVE-2024-11576EPSS 0.4%2024-11-22

    Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required …