cve.bz

CWE-122: Heap-based Buffer Overflow, page 58

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-1848EPSS 0.3%

    Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS D…

  2. 7.5CVE-2024-28231EPSS 0.9%

    eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in…

  3. 6.2CVE-2024-28572EPSS 0.3%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_SetTagValue() function when reading images in JPEG format.

  4. 6.0CVE-2024-22453EPSS 0.2%

    Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.

  5. 7.8CVE-2024-20755EPSS 4.4%

    Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…

  6. 7.8CVE-2024-20745EPSS 0.5%

    Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…

  7. 7.8CVE-2024-26540EPSS 0.3%

    A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze.

  8. 7.8CVE-2024-26178EPSS 0.9%

    Windows Kernel Elevation of Privilege Vulnerability

  9. 8.8CVE-2024-26166EPSS 2.0%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  10. 8.8CVE-2024-26161EPSS 1.9%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  11. 8.8CVE-2024-26159EPSS 1.9%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  12. 7.8CVE-2024-21330EPSS 1.0%

    Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

  13. 8.4CVE-2024-27209EPSS 0.09%

    there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  14. 8.8CVE-2023-46426EPSS 0.9%

    Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file.c.

  15. 9.8CVE-2024-22857EPSS 1.7%

    Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may have data upto MAXLEN_CFG_LINE(MAXLEN_PATH*4) + 1. So a check was missing in zlog_rule_new() while copyi…

  16. 8.8CVE-2023-45591EPSS 0.7%

    A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger a memory corruption in the context of the binary. This may result in a Denial-of…

  17. 7.8CVE-2024-0156EPSS 0.2%

    Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation.

  18. 7.8CVE-2024-22100EPSS 0.3%

    MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open …

  19. 5.5CVE-2024-24246EPSS 0.4%

    Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.

  20. 8.1CVE-2024-25262EPSS 0.9%

    texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.

  21. 6.5CVE-2024-22532EPSS 1.1%

    Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service via crafted xwd file.

  22. 7.8CVE-2024-1847EPSS 0.3%

    Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings fr…

  23. 7.8CVE-2024-21886EPSS 1.4%

    A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

  24. 7.8CVE-2024-21885EPSS 1.4%

    A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow…

  25. 9.8CVE-2024-21802EPSS 1.4%

    A heap-based buffer overflow vulnerability exists in the GGUF library info-&gt;ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger thi…

  26. 7.8CVE-2024-23127EPSS 0.5%

    A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a cra…

  27. 7.8CVE-2023-42848EPSS 0.2%

    The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. Processing a maliciously crafted image ma…

  28. 9.8CVE-2024-21795EPSS 1.8%

    A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .egi file can lead to arbitrary code execution. An attacker can pro…

  29. 9.8CVE-2023-45318EPSS 1.7%

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network packet can lead to arbitrary code execution. An attacker can send a malicious pac…

  30. 5.3CVE-2024-26327EPSS 0.6%

    An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

  31. 7.8CVE-2024-0018EPSS 0.1%

    In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …

  32. 7.5CVE-2024-0040EPSS 2.0%

    In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exp…

  33. 7.8CVE-2024-0033EPSS 0.2%

    In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…

  34. 7.8CVE-2024-20739EPSS 0.6%

    Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  35. 7.8CVE-2022-23086EPSS 0.4%

    Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed size header. Other heap content would be overwritten if the specified size was too small.…

  36. 8.8CVE-2024-21370EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  37. 8.8CVE-2024-21369EPSS 1.5%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  38. 8.8CVE-2024-21368EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  39. 8.8CVE-2024-21367EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  40. 8.8CVE-2024-21366EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  41. 8.8CVE-2024-21365EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  42. 8.8CVE-2024-21361EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  43. 8.8CVE-2024-21360EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  44. 8.8CVE-2024-21359EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  45. 8.8CVE-2024-21358EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  46. 7.8CVE-2024-21354EPSS 0.6%

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  47. 8.8CVE-2024-21353EPSS 1.6%

    Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

  48. 8.8CVE-2024-21349EPSS 1.6%

    Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

  49. 7.5CVE-2024-21348EPSS 2.2%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  50. 7.5CVE-2024-21347EPSS 1.4%

    Microsoft ODBC Driver Remote Code Execution Vulnerability