cve.bz

CWE-122: Heap-based Buffer Overflow, page 53

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2024-38120EPSS 1.6%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  2. 8.8CVE-2024-38116EPSS 1.8%

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

  3. 8.8CVE-2024-38115EPSS 1.6%

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

  4. 8.8CVE-2024-38114EPSS 1.6%

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

  5. 6.9CVE-2024-7272EPSS 1.2%

    A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to i…

  6. 4.8CVE-2024-43168EPSS 0.3%

    DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim …

  7. 8.8CVE-2024-7534EPSS 0.8%

    Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  8. 8.8CVE-2024-6994EPSS 0.6%

    Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  9. 6.9CVE-2024-7055EPSS 1.4%

    A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to in…

  10. 7.8CVE-2024-7546EPSS 0.3%

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…

  11. 7.8CVE-2024-7545EPSS 0.3%

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…

  12. 7.8CVE-2024-7544EPSS 0.3%

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…

  13. 7.8CVE-2024-7543EPSS 0.3%

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…

  14. 7.8CVE-2024-39392EPSS 0.4%

    InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  15. 8.1CVE-2024-6873EPSS 0.7%

    It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is…

  16. 6.2CVE-2024-41440EPSS 0.8%

    A heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.

  17. 6.2CVE-2024-41438EPSS 0.8%

    A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.

  18. 5.5CVE-2024-41437EPSS 0.4%

    A heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.

  19. 6.9CVE-2024-32671EPSS 0.5%

    Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.

  20. 7.5CVE-2024-40764EPSS 0.7%

    Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).

  21. 9.8CVE-2024-40129EPSS 0.5%

    Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c.

  22. 8.7CVE-2024-39518EPSS 0.4%

    A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a steady increase in memory utilization, ultimately leading to a Denial …

  23. 9.0CVE-2024-37310EPSS 0.7%

    EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and …

  24. 8.4CVE-2024-39883EPSS 0.7%

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this v…

  25. 7.8CVE-2024-20785EPSS 0.4%

    InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  26. 7.8CVE-2024-20783EPSS 0.4%

    InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  27. 7.8CVE-2024-20781EPSS 0.3%

    InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  28. 8.8CVE-2024-38088EPSS 1.7%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  29. 7.8CVE-2024-38079EPSS 0.7%

    Windows Graphics Component Elevation of Privilege Vulnerability

  30. 9.8CVE-2024-38077EPSS 84%

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  31. 9.8CVE-2024-38076EPSS 2.1%

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  32. 6.8CVE-2024-38065EPSS 0.9%

    Secure Boot Security Feature Bypass Vulnerability

  33. 8.8CVE-2024-38060EPSS 16%

    Windows Imaging Component Remote Code Execution Vulnerability

  34. 7.8CVE-2024-38054EPSS 10%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  35. 7.8CVE-2024-38051EPSS 1.1%

    Windows Graphics Component Remote Code Execution Vulnerability

  36. 7.1CVE-2024-38032EPSS 1.0%

    Microsoft Xbox Remote Code Execution Vulnerability

  37. 7.2CVE-2024-38025EPSS 2.1%

    Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

  38. 8.0CVE-2024-37987EPSS 1.3%

    Secure Boot Security Feature Bypass Vulnerability

  39. 8.0CVE-2024-37977EPSS 1.1%

    Secure Boot Security Feature Bypass Vulnerability

  40. 8.8CVE-2024-37334EPSS 1.6%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  41. 8.8CVE-2024-37333EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  42. 8.8CVE-2024-37332EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  43. 8.8CVE-2024-37331EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  44. 8.8CVE-2024-37330EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  45. 8.8CVE-2024-37329EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  46. 8.8CVE-2024-37328EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  47. 8.8CVE-2024-37327EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  48. 8.8CVE-2024-37326EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  49. 8.8CVE-2024-37324EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  50. 8.8CVE-2024-37322EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability