CWE-122: Heap-based Buffer Overflow, page 54

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 8.8CVE-2024-37321EPSS 1.6%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2. 8.8CVE-2024-37319EPSS 1.6%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

3. 8.8CVE-2024-37318EPSS 1.9%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

4. 8.8CVE-2024-35272EPSS 1.9%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

5. 8.8CVE-2024-35271EPSS 1.9%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

6. 8.8CVE-2024-35256EPSS 1.6%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

7. 8.8CVE-2024-21449EPSS 1.6%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8. 8.8CVE-2024-21425EPSS 1.6%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

9. 8.8CVE-2024-21415EPSS 1.8%2024-07-09

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

10. 8.8CVE-2024-21414EPSS 1.9%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

11. 8.8CVE-2024-21398EPSS 1.9%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

12. 8.8CVE-2024-21373EPSS 1.8%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

13. 8.8CVE-2024-21335EPSS 1.8%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

14. 8.8CVE-2024-21333EPSS 1.8%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

15. 8.8CVE-2024-21331EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

16. 8.8CVE-2024-21317EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

17. 8.8CVE-2024-20701EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

18. 7.2CVE-2024-21778EPSS 0.9%2024-07-08

    A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrary code execution. An attacker can uploa…

19. 5.3CVE-2024-6383EPSS 0.6%2024-07-03

    The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects l…

20. 3.3CVE-2024-29508EPSS 0.4%2024-07-03

    Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

21. 8.4CVE-2023-52168EPSS 0.3%2024-07-03

    The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11…

22. 8.4CVE-2024-32229EPSS 0.3%2024-07-01

    FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column.

23. 4.3CVE-2024-39133EPSS 0.5%2024-06-27

    Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

24. 6.5CVE-2024-38950EPSS 0.5%2024-06-26

    Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.

25. 6.5CVE-2024-38949EPSS 0.4%2024-06-26

    Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc

26. 7.8CVE-2024-23155EPSS 0.4%2024-06-25

    A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrar…

27. 7.8CVE-2024-23154EPSS 0.4%2024-06-25

    A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute …

28. 7.8CVE-2024-37001EPSS 0.4%2024-06-25

    A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arb…

29. 6.7CVE-2024-6154EPSS 0.2%2024-06-20

    Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain …

30. 6.5CVE-2024-29013EPSS 0.6%2024-06-20

    Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.

31. 9.8CVE-2024-37080EPSS 12%2024-06-18

    vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potent…

32. 4.9CVE-2024-37280EPSS 0.6%2024-06-13

    A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow …

33. 8.8CVE-2024-5835EPSS 0.5%2024-06-11

    Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security …

34. 7.4CVE-2024-36702EPSS 0.2%2024-06-11

    libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.

35. 7.8CVE-2024-30095EPSS 1.0%2024-06-11

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

36. 7.8CVE-2024-30094EPSS 0.9%2024-06-11

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

37. 7.8CVE-2024-30091EPSS 4.3%2024-06-11

    Win32k Elevation of Privilege Vulnerability

38. 7.8CVE-2024-30085ExploitEPSS 14%2024-06-11

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

39. 8.0CVE-2024-30077EPSS 1.8%2024-06-11

    Windows OLE Remote Code Execution Vulnerability

40. 8.0CVE-2024-30075EPSS 0.9%2024-06-11

    Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

41. 8.0CVE-2024-30074EPSS 1.2%2024-06-11

    Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

42. 5.5CVE-2024-30066EPSS 0.6%2024-06-11

    Winlogon Elevation of Privilege Vulnerability

43. 9.8CVE-2024-2011EPSS 0.5%2024-06-11

    A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code, which is usually outside the scope of a program's implicit sec…

44. 7.8CVE-2024-5301EPSS 0.5%2024-06-06

    Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is require…

45. 7.8CVE-2024-27374EPSS 0.2%2024-06-05

    An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_publish_get_nl_params(), there is no input validation check on hal_req->service_specific_info_l…

46. 7.8CVE-2024-27372EPSS 0.2%2024-06-05

    An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->infrastructure_ssid_le…

47. 7.5CVE-2024-36843EPSS 0.8%2024-05-31

    libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.

48. 7.8CVE-2024-22058EPSS 0.4%2024-05-31

    A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in Ivanti EPM 2021.1 and older.

49. 8.8CVE-2024-5493EPSS 0.9%2024-05-30

    Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

50. 7.5CVE-2024-35434EPSS 0.6%2024-05-29

    Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.