CWE-122: Heap-based Buffer Overflow, page 59

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 8.8CVE-2024-21345EPSS 20%2024-02-13

   Windows Kernel Elevation of Privilege Vulnerability

2. 6.8CVE-2024-21341EPSS 1.0%2024-02-13

   Windows Kernel Remote Code Execution Vulnerability

3. 7.8CVE-2024-23796EPSS 0.3%2024-02-13

   A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected application is vulnerable to heap-based buffer overflow while…

4. 5.5CVE-2024-1062EPSS 0.3%2024-02-12

   A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

5. 8.8CVE-2024-25448EPSS 0.7%2024-02-09

   An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.

6. 9.8CVE-2024-1283EPSS 22%2024-02-07

   Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

7. 9.8CVE-2024-24577EPSS 1.5%2024-02-06

   libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_index_add` can cause heap corrupti…

8. 5.5CVE-2024-0911EPSS 0.3%2024-02-06

   A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash.

9. 5.5CVE-2024-0684EPSS 0.5%2024-02-06

   A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of …

10. 7.2CVE-2023-41276EPSS 0.5%2024-02-02

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

11. 7.2CVE-2023-41275EPSS 0.5%2024-02-02

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

12. 7.2CVE-2023-41273EPSS 0.6%2024-02-02

    A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed t…

13. 9.1CVE-2023-5841EPSS 1.2%2024-02-01

    Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow …

14. 7.5CVE-2023-6779EPSS 3.2%2024-01-31

    An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigge…

15. 7.8CVE-2023-6246EPSS 4.8%2024-01-31

    A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ide…

16. 7.5CVE-2023-52356EPSS 2.5%2024-01-25

    A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

17. 9.8CVE-2024-22211EPSS 1.1%2024-01-19

    FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. Free…

18. 7.8CVE-2023-31031EPSS 0.2%2024-01-12

    NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, info…

19. 5.3CVE-2024-21596EPSS 0.5%2024-01-12

    A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). If an attacker sends a…

20. 5.5CVE-2024-21594EPSS 0.2%2024-01-12

    A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service (DoS). On an SRX 5000 Series device, when execu…

21. 5.2CVE-2024-21337EPSS 0.4%2024-01-11

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

22. 9.8CVE-2023-48263EPSS 0.8%2024-01-10

    The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.

23. 8.8CVE-2023-37297EPSS 0.3%2024-01-09

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availabili…

24. 8.8CVE-2023-37295EPSS 0.3%2024-01-09

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availabili…

25. 8.8CVE-2023-37294EPSS 0.3%2024-01-09

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availabili…

26. 7.3CVE-2024-20697EPSS 72%2024-01-09

    Windows libarchive Remote Code Execution Vulnerability

27. 7.3CVE-2024-20696EPSS 3.2%2024-01-09

    Windows libarchive Remote Code Execution Vulnerability

28. 7.8CVE-2024-20677EPSS 3.3%2024-01-09

    A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Offi…

29. 7.8CVE-2022-36764EPSS 0.3%2024-01-09

    EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality…

30. 7.8CVE-2022-36763EPSS 0.3%2024-01-09

    EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentialit…

31. 7.8CVE-2023-49123EPSS 0.2%2024-01-09

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to exe…

32. 7.8CVE-2023-49122EPSS 0.2%2024-01-09

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to exe…

33. 7.8CVE-2023-49121EPSS 0.2%2024-01-09

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to exe…

34. 5.5CVE-2023-6992EPSS 0.2%2024-01-04

    Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A lo…

35. 7.8CVE-2023-47039EPSS 0.4%2024-01-02

    A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell (`cmd.exe`). When running an executable that uses the Windows Perl interpreter, Perl atte…

36. 7.3CVE-2023-7104EPSS 1.5%2023-12-29

    A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads t…

37. 9.8CVE-2023-7158EPSS 1.2%2023-12-29

    A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the at…

38. 7.5CVE-2023-48704EPSS 0.5%2023-12-22

    ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially craft…

39. 9.8CVE-2023-47118EPSS 0.5%2023-12-20

    ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially craf…

40. 7.8CVE-2023-47038EPSS 0.8%2023-12-18

    A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.

41. 7.5CVE-2023-3430EPSS 1.2%2023-12-18

    A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buf…

42. 9.8CVE-2023-33221EPSS 1.0%2023-12-15

    When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution o…

43. 5.5CVE-2023-50246EPSS 0.5%2023-12-13

    jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.

44. 8.8CVE-2023-35639EPSS 2.4%2023-12-12

    Microsoft ODBC Driver Remote Code Execution Vulnerability

45. 8.8CVE-2023-35630EPSS 6.1%2023-12-12

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

46. 7.8CVE-2023-21740EPSS 1.1%2023-12-12

    Windows Media Remote Code Execution Vulnerability

47. 5.5CVE-2023-28527EPSS 0.2%2023-12-09

    IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.

48. 5.5CVE-2023-28526EPSS 0.2%2023-12-09

    IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.

49. 7.8CVE-2023-28523EPSS 0.3%2023-12-09

    IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.

50. 5.5CVE-2023-40465EPSS 0.2%2023-12-04

    Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal.