cve.bz

CWE-122: Heap-based Buffer Overflow, page 50

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-11518EPSS 0.4%

    IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  2. 7.8CVE-2024-11516EPSS 0.4%

    IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  3. 7.8CVE-2024-11514EPSS 0.4%

    IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  4. 7.8CVE-2024-11513EPSS 0.4%

    IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  5. 7.8CVE-2024-11511EPSS 0.4%

    IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required…

  6. 7.8CVE-2024-11509EPSS 0.4%

    IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  7. 7.8CVE-2024-6816EPSS 0.6%

    IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  8. 8.8CVE-2024-6246EPSS 0.8%

    Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentica…

  9. 7.8CVE-2024-5876EPSS 0.5%

    IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit…

  10. 5.1CVE-2024-37041EPSS 0.9%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute cod…

  11. 7.8CVE-2024-10204EPSS 0.2%

    Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker …

  12. 7.8CVE-2024-7730EPSS 0.3%

    A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger …

  13. 6.0CVE-2024-3447EPSS 0.6%

    A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use…

  14. 5.3CVE-2024-48075EPSS 0.6%

    A Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL from 09/09/24 and earlier allows a remote attacker to trigger a Denial-of-Service via a malformed TLS Client Key Exchange message.

  15. 7.8CVE-2024-49509EPSS 0.5%

    InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  16. 7.8CVE-2024-49508EPSS 0.5%

    InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  17. 7.8CVE-2024-49507EPSS 0.5%

    InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  18. 7.8CVE-2024-49525EPSS 0.3%

    Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

  19. 7.8CVE-2024-49517EPSS 0.3%

    Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

  20. 7.8CVE-2024-47431EPSS 0.3%

    Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

  21. 7.8CVE-2024-47450EPSS 0.3%

    Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

  22. 7.3CVE-2024-33505EPSS 0.5%

    A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0…

  23. 7.8CVE-2024-49030EPSS 0.8%

    Microsoft Excel Remote Code Execution Vulnerability

  24. 8.8CVE-2024-49017EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  25. 8.8CVE-2024-49015EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  26. 8.8CVE-2024-49013EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  27. 8.8CVE-2024-49012EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  28. 8.8CVE-2024-49011EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  29. 8.8CVE-2024-49010EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  30. 8.8CVE-2024-49009EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  31. 8.8CVE-2024-49008EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  32. 8.8CVE-2024-49007EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  33. 8.8CVE-2024-49006EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  34. 8.8CVE-2024-49005EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  35. 8.8CVE-2024-49004EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  36. 8.8CVE-2024-49002EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  37. 8.8CVE-2024-49001EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  38. 8.8CVE-2024-49000EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  39. 8.8CVE-2024-48999EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  40. 8.8CVE-2024-48998EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  41. 8.8CVE-2024-48997EPSS 1.5%

    SQL Server Native Client Remote Code Execution Vulnerability

  42. 8.8CVE-2024-48996EPSS 1.7%

    SQL Server Native Client Remote Code Execution Vulnerability

  43. 8.8CVE-2024-48995EPSS 1.7%

    SQL Server Native Client Remote Code Execution Vulnerability

  44. 8.8CVE-2024-48994EPSS 1.7%

    SQL Server Native Client Remote Code Execution Vulnerability

  45. 8.8CVE-2024-48993EPSS 1.7%

    SQL Server Native Client Remote Code Execution Vulnerability

  46. 8.8CVE-2024-43627EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  47. 7.8CVE-2024-43626EPSS 0.7%

    Windows Telephony Service Elevation of Privilege Vulnerability

  48. 8.8CVE-2024-43622EPSS 1.6%

    Windows Telephony Service Remote Code Execution Vulnerability

  49. 8.8CVE-2024-43621EPSS 1.6%

    Windows Telephony Service Remote Code Execution Vulnerability

  50. 8.8CVE-2024-43620EPSS 1.6%

    Windows Telephony Service Remote Code Execution Vulnerability