CWE-122: Heap-based Buffer Overflow, page 60

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 9.1CVE-2023-5908EPSS 1.0%2023-11-30

   KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

2. 7.8CVE-2023-41140EPSS 0.3%2023-11-23

   A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitr…

3. 9.8CVE-2023-29073EPSS 1.1%2023-11-23

   A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbi…

4. 7.8CVE-2023-47056EPSS 0.4%2023-11-16

   Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re…

5. 5.5CVE-2023-47051EPSS 0.4%2023-11-16

   Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

6. 7.8CVE-2023-47042EPSS 0.4%2023-11-16

   Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…

7. 8.0CVE-2023-36425EPSS 1.5%2023-11-14

   Windows Distributed File System (DFS) Remote Code Execution Vulnerability

8. 8.8CVE-2023-36423EPSS 2.0%2023-11-14

   Microsoft Remote Registry Service Remote Code Execution Vulnerability

9. 7.8CVE-2023-36408EPSS 0.6%2023-11-14

   Windows Hyper-V Elevation of Privilege Vulnerability

10. 8.8CVE-2023-36402EPSS 1.8%2023-11-14

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

11. 8.8CVE-2023-36400EPSS 4.3%2023-11-14

    Windows HMAC Key Derivation Elevation of Privilege Vulnerability

12. 5.5CVE-2023-36042EPSS 0.8%2023-11-14

    Visual Studio Denial of Service Vulnerability

13. 7.8CVE-2023-36036KEVEPSS 17%2023-11-14

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

14. 9.8CVE-2023-36028EPSS 2.8%2023-11-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

15. 9.8CVE-2023-27882EPSS 1.8%2023-11-14

    A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to…

16. 9.8CVE-2023-25181EPSS 1.7%2023-11-14

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packe…

17. 9.8CVE-2023-46256EPSS 0.7%2023-10-31

    PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of `parserbuf_index` value checking. A malfun…

18. 6.5CVE-2023-5568EPSS 2.1%2023-10-25

    A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.

19. 7.8CVE-2023-4692EPSS 0.5%2023-10-25

    An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack m…

20. 8.8CVE-2023-5686EPSS 0.8%2023-10-20

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

21. 8.1CVE-2023-27395EPSS 1.5%2023-10-12

    A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can…

22. 7.8CVE-2023-36730EPSS 0.9%2023-10-10

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

23. 7.8CVE-2023-36598EPSS 0.8%2023-10-10

    Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

24. 8.8CVE-2023-36577EPSS 1.8%2023-10-10

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

25. 7.8CVE-2023-36417EPSS 0.8%2023-10-10

    Microsoft SQL OLE DB Remote Code Execution Vulnerability

26. 7.8CVE-2023-43787EPSS 0.5%2023-10-10

    A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

27. 5.7CVE-2023-5460EPSS 0.4%2023-10-09

    A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some unknown processing of the component Modbus Data Packet Handler. The manipulation leads to heap-based buffer overflow. …

28. 5.5CVE-2023-3428EPSS 0.3%2023-10-04

    A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

29. 7.8CVE-2023-4911KEVExploitEPSS 64%2023-10-03

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables …

30. 7.5CVE-2023-5344EPSS 1.3%2023-10-02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

31. 9.6CVE-2023-4264EPSS 1.1%2023-09-27

    Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

32. 7.0CVE-2023-4504EPSS 0.6%2023-09-21

    Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, …

33. 6.7CVE-2023-32461EPSS 0.2%2023-09-15

    Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.

34. 7.8CVE-2023-32643EPSS 0.4%2023-09-14

    A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who foll…

35. 8.8CVE-2023-38147EPSS 0.9%2023-09-12

    Windows Miracast Wireless Display Remote Code Execution Vulnerability

36. 7.8CVE-2023-38143EPSS 3.4%2023-09-12

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

37. 7.8CVE-2023-36793EPSS 1.2%2023-09-12

    Visual Studio Remote Code Execution Vulnerability

38. 7.8CVE-2023-36772EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

39. 7.8CVE-2023-36771EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

40. 7.8CVE-2023-36770EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

41. 7.8CVE-2023-36740EPSS 0.7%2023-09-12

    3D Viewer Remote Code Execution Vulnerability

42. 7.8CVE-2023-36739EPSS 0.7%2023-09-12

    3D Viewer Remote Code Execution Vulnerability

43. 7.8CVE-2023-38076EPSS 0.4%2023-09-12

    A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11),…

44. 7.8CVE-2023-38071EPSS 0.4%2023-09-12

    A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11),…

45. 7.8CVE-2023-4781EPSS 0.6%2023-09-05

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

46. 7.8CVE-2023-4751EPSS 0.6%2023-09-03

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

47. 7.8CVE-2023-4738EPSS 0.6%2023-09-02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

48. 5.5CVE-2023-4682EPSS 0.3%2023-08-31

    Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.

49. 5.5CVE-2023-40166EPSS 0.4%2023-08-25

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it …

50. 7.8CVE-2023-40031EPSS 0.5%2023-08-25

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known …