cve.bz

CWE-122: Heap-based Buffer Overflow, page 57

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2024-29982EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  2. 8.8CVE-2024-29048EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  3. 8.8CVE-2024-29047EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  4. 8.8CVE-2024-29046EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  5. 8.8CVE-2024-29044EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  6. 8.8CVE-2024-28943EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  7. 8.8CVE-2024-28941EPSS 2.3%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  8. 8.8CVE-2024-28940EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  9. 8.8CVE-2024-28937EPSS 2.3%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  10. 8.8CVE-2024-28935EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  11. 8.8CVE-2024-28932EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  12. 8.8CVE-2024-28927EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  13. 8.8CVE-2024-28926EPSS 2.3%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  14. 8.8CVE-2024-28915EPSS 2.2%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  15. 8.8CVE-2024-28914EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  16. 8.8CVE-2024-28913EPSS 2.3%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  17. 8.8CVE-2024-28912EPSS 2.3%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  18. 8.8CVE-2024-28911EPSS 2.2%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  19. 8.8CVE-2024-28910EPSS 2.8%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  20. 8.8CVE-2024-28909EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  21. 8.8CVE-2024-28908EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  22. 8.8CVE-2024-28906EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  23. 7.5CVE-2024-28896EPSS 1.0%

    Secure Boot Security Feature Bypass Vulnerability

  24. 7.8CVE-2024-26256EPSS 88%

    Libarchive Remote Code Execution Vulnerability

  25. 7.8CVE-2024-26239EPSS 0.6%

    Windows Telephony Server Elevation of Privilege Vulnerability

  26. 7.8CVE-2024-26229EPSS 9.4%

    Windows CSC Service Elevation of Privilege Vulnerability

  27. 8.8CVE-2024-26214EPSS 2.0%

    Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability

  28. 7.8CVE-2024-26211EPSS 4.1%

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

  29. 8.8CVE-2024-26210EPSS 2.0%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  30. 8.8CVE-2024-26205EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  31. 7.2CVE-2024-26202EPSS 2.2%

    DHCP Server Service Remote Code Execution Vulnerability

  32. 8.8CVE-2024-26200EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  33. 7.2CVE-2024-26195EPSS 2.2%

    DHCP Server Service Remote Code Execution Vulnerability

  34. 8.8CVE-2024-26179EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  35. 6.8CVE-2024-26168EPSS 0.9%

    Secure Boot Security Feature Bypass Vulnerability

  36. 7.8CVE-2024-27341EPSS 0.4%

    Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is require…

  37. 7.8CVE-2024-27340EPSS 0.4%

    Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is require…

  38. 9.8CVE-2024-3209EPSS 1.2%

    A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function get_ne64 of the file bele.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public an…

  39. 9.8CVE-2024-3207EPSS 1.0%

    A vulnerability was found in ermig1979 Simd up to 6.0.134. It has been declared as critical. This vulnerability affects the function ReadUnsigned of the file src/Simd/SimdMemoryStream.h. The manipulation leads to heap-based buffer overflow…

  40. 9.8CVE-2024-3204EPSS 1.3%

    A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical. Affected by this vulnerability is the function ndlz4_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c. The manipulation leads to heap-bas…

  41. 9.8CVE-2024-3203EPSS 1.4%

    A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. The manipulation leads to heap-based buffer overflow.…

  42. 6.5CVE-2024-30806EPSS 0.5%

    An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42aac.

  43. 7.8CVE-2024-3024EPSS 0.4%

    A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attac…

  44. 8.6CVE-2024-20259EPSS 0.8%

    A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerabili…

  45. 8.4CVE-2024-25390EPSS 0.3%

    A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.

  46. 8.4CVE-2024-24335EPSS 0.4%

    A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.

  47. 8.4CVE-2024-24334EPSS 0.4%

    A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.

  48. 7.8CVE-2024-2212EPSS 0.5%

    In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wr…

  49. 7.8CVE-2024-21913EPSS 0.2%

    A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers…

  50. 6.3CVE-2024-2824EPSS 0.7%

    A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated rem…