cve.bz

CWE-122: Heap-based Buffer Overflow, page 51

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2024-43598EPSS 1.4%

    LightGBM Remote Code Execution Vulnerability

  2. 8.8CVE-2024-43462EPSS 1.7%

    SQL Server Native Client Remote Code Execution Vulnerability

  3. 8.8CVE-2024-38255EPSS 1.7%

    SQL Server Native Client Remote Code Execution Vulnerability

  4. 8.0CVE-2023-29125EPSS 0.3%

    A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.

  5. 7.2CVE-2024-10525EPSS 59%

    In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. T…

  6. 7.8CVE-2024-9632EPSS 0.9%

    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local…

  7. 7.8CVE-2024-8594EPSS 0.2%

    A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbi…

  8. 7.8CVE-2024-8591EPSS 0.2%

    A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or ex…

  9. 7.8CVE-2024-8587EPSS 0.2%

    A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or exe…

  10. 8.1CVE-2024-43587EPSS 0.9%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  11. 8.3CVE-2024-43579EPSS 0.8%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  12. 8.3CVE-2024-43578EPSS 0.8%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  13. 8.4CVE-2024-47964EPSS 0.3%

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerabi…

  14. 7.8CVE-2024-45143EPSS 0.3%

    Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

  15. 7.8CVE-2024-45139EPSS 0.3%

    Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

  16. 7.8CVE-2024-47417EPSS 0.4%

    Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

  17. 8.8CVE-2024-43611EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  18. 8.8CVE-2024-43608EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  19. 8.8CVE-2024-43607EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  20. 8.8CVE-2024-43593EPSS 1.7%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  21. 8.8CVE-2024-43592EPSS 1.7%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  22. 8.8CVE-2024-43589EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  23. 8.8CVE-2024-43564EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  24. 7.8CVE-2024-43560EPSS 3.6%

    Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

  25. 7.8CVE-2024-43528EPSS 0.5%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  26. 7.8CVE-2024-43527EPSS 0.6%

    Windows Kernel Elevation of Privilege Vulnerability

  27. 6.8CVE-2024-43526EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  28. 6.8CVE-2024-43525EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  29. 6.8CVE-2024-43523EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  30. 7.0CVE-2024-43522EPSS 0.5%

    Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

  31. 8.8CVE-2024-43518EPSS 1.0%

    Windows Telephony Server Remote Code Execution Vulnerability

  32. 8.8CVE-2024-43517EPSS 1.4%

    Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

  33. 6.6CVE-2024-43480EPSS 1.1%

    Azure Service Fabric for Linux Remote Code Execution Vulnerability

  34. 8.8CVE-2024-43453EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  35. 8.8CVE-2024-38265EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  36. 7.8CVE-2024-38261EPSS 0.9%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  37. 8.8CVE-2024-38212EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  38. 7.3CVE-2024-41981EPSS 0.2%

    A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing spe…

  39. 6.5CVE-2024-6444EPSS 0.3%

    No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.

  40. 6.3CVE-2024-45872EPSS 0.4%

    Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability occurs due to insufficient validation of PSD files.

  41. 6.8CVE-2024-20522EPSS 0.5%

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, r…

  42. 6.8CVE-2024-20517EPSS 0.4%

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, r…

  43. 6.8CVE-2024-20516EPSS 0.4%

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, r…

  44. 7.8CVE-2024-46264EPSS 0.5%

    cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.

  45. 7.8CVE-2024-7674EPSS 0.2%

    A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of…

  46. 7.8CVE-2024-7673EPSS 0.2%

    A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of t…

  47. 6.5CVE-2024-45993EPSS 0.4%

    Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.

  48. 5.9CVE-2024-38796EPSS 0.4%

    EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integri…

  49. 4.3CVE-2024-46632EPSS 0.5%

    Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.

  50. 5.5CVE-2024-46488EPSS 0.4%

    sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.