CWE-122: Heap-based Buffer Overflow, page 52

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 6.5CVE-2024-20508EPSS 0.4%2024-09-25

   A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured security policies or cause a denial of serv…

2. 8.0CVE-2024-46461EPSS 0.6%2024-09-25

   VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger e…

3. 7.8CVE-2024-7018EPSS 0.2%2024-09-23

   Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

4. 8.4CVE-2024-45679EPSS 0.3%2024-09-18

   Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

5. 6.5CVE-2022-39068EPSS 0.4%2024-09-18

   There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vulnerability to perform a denial of service attack.

6. 8.8CVE-2024-8905EPSS 0.5%2024-09-17

   Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium)

7. 6.9CVE-2024-8948EPSS 1.0%2024-09-17

   A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched r…

8. 6.9CVE-2024-8946EPSS 1.0%2024-09-17

   A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow…

9. 9.8CVE-2024-38812KEVEPSS 55%2024-09-17

   The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet po…

10. 6.5CVE-2024-6259EPSS 0.6%2024-09-13

    BT: HCI: adv_ext_report Improper discarding in adv_ext_report

11. 6.5CVE-2024-6135EPSS 0.4%2024-09-13

    BT:Classic: Multiple missing buf length checks

12. 6.5CVE-2024-6258EPSS 0.4%2024-09-13

    BT: Missing length checks of net_buf in rfcomm_handle_data

13. 7.8CVE-2024-43756EPSS 0.4%2024-09-13

    Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

14. 7.8CVE-2024-39380EPSS 0.3%2024-09-13

    After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

15. 8.8CVE-2024-8636EPSS 0.6%2024-09-11

    Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

16. 7.8CVE-2024-38242EPSS 3.4%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

17. 7.8CVE-2024-38238EPSS 0.8%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

18. 7.8CVE-2024-38237EPSS 3.4%2024-09-10

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

19. 8.1CVE-2024-38045EPSS 1.4%2024-09-10

    Windows TCP/IP Remote Code Execution Vulnerability

20. 8.8CVE-2024-37335EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

21. 8.8CVE-2024-26191EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

22. 9.8CVE-2024-21416EPSS 1.4%2024-09-10

    Windows TCP/IP Remote Code Execution Vulnerability

23. 2.9CVE-2024-8443EPSS 0.3%2024-09-10

    A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-…

24. 6.9CVE-2024-40754EPSS 0.5%2024-09-10

    Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.

25. 9.3CVE-2024-33698EPSS 1.1%2024-09-10

    A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versi…

26. 5.3CVE-2024-32763EPSS 0.6%2024-09-06

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already …

27. 5.5CVE-2024-45306EPSS 0.3%2024-09-02

    Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing…

28. 8.8CVE-2024-8198EPSS 0.6%2024-08-28

    Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

29. 8.8CVE-2024-8193EPSS 0.6%2024-08-28

    Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

30. 7.8CVE-2024-42851EPSS 0.3%2024-08-27

    Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the paresetag function.

31. 4.5CVE-2024-43802EPSS 0.3%2024-08-26

    Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next charac…

32. 5.5CVE-2024-43790EPSS 0.3%2024-08-22

    Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern is displayed at the bottom of the screen in a buffer (msgbuf). When right-left m…

33. 8.8CVE-2024-7973EPSS 0.8%2024-08-21

    Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium)

34. 8.8CVE-2024-7967EPSS 0.6%2024-08-21

    Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

35. 6.5CVE-2024-42438EPSS 0.6%2024-08-14

    Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

36. 6.5CVE-2024-42437EPSS 0.6%2024-08-14

    Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

37. 6.5CVE-2024-42436EPSS 0.6%2024-08-14

    Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.

38. 8.5CVE-2024-39825EPSS 0.6%2024-08-14

    Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.

39. 7.8CVE-2024-41853EPSS 0.4%2024-08-14

    InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

40. 7.8CVE-2024-41850EPSS 0.4%2024-08-14

    InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

41. 7.8CVE-2024-38172EPSS 0.9%2024-08-13

    Microsoft Excel Remote Code Execution Vulnerability

42. 7.1CVE-2024-38170EPSS 0.8%2024-08-13

    Microsoft Excel Remote Code Execution Vulnerability

43. 7.8CVE-2024-38169EPSS 0.8%2024-08-13

    Microsoft Office Visio Remote Code Execution Vulnerability

44. 6.8CVE-2024-38161EPSS 0.8%2024-08-13

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

45. 9.1CVE-2024-38160EPSS 2.2%2024-08-13

    Windows Network Virtualization Remote Code Execution Vulnerability

46. 8.8CVE-2024-38154EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

47. 7.8CVE-2024-38152EPSS 0.9%2024-08-13

    Windows OLE Remote Code Execution Vulnerability

48. 7.8CVE-2024-38142EPSS 0.6%2024-08-13

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

49. 8.8CVE-2024-38130EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

50. 8.8CVE-2024-38121EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability