cve.bz

CWE-122: Heap-based Buffer Overflow, page 61

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-4322EPSS 0.9%

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

  2. 7.5CVE-2023-39947EPSS 1.0%

    eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed `PID_PROPERTY_LIST` par…

  3. 7.5CVE-2023-39946EPSS 0.9%

    eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, heap can be overflowed by providing a PID_PROPERTY_LIST parameter that …

  4. 7.8CVE-2023-38212EPSS 0.4%

    Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

  5. 8.8CVE-2023-2905EPSS 1.0%

    Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in…

  6. 7.8CVE-2023-38170EPSS 0.7%

    HEVC Video Extensions Remote Code Execution Vulnerability

  7. 7.8CVE-2023-38154EPSS 0.8%

    Windows Kernel Elevation of Privilege Vulnerability

  8. 7.8CVE-2023-36896EPSS 1.0%

    Microsoft Excel Remote Code Execution Vulnerability

  9. 7.8CVE-2023-36865EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  10. 7.5CVE-2023-36532EPSS 1.5%

    Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.

  11. 6.5CVE-2023-3180EPSS 0.2%

    A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially l…

  12. 3.3CVE-2023-4016EPSS 0.3%

    Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

  13. 8.8CVE-2023-21406EPSS 0.3%

    Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of th…

  14. 7.8CVE-2022-46290EPSS 0.8%

    Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a m…

  15. 7.8CVE-2022-46289EPSS 0.8%

    Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a m…

  16. 9.8CVE-2023-3463EPSS 0.4%

    All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bou…

  17. 8.8CVE-2022-24834EPSS 41%

    Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem ex…

  18. 7.5CVE-2023-24474EPSS 0.7%

    Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

  19. 7.8CVE-2023-2763EPSS 0.4%

    Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities co…

  20. 7.8CVE-2023-35374EPSS 0.7%

    Paint 3D Remote Code Execution Vulnerability

  21. 7.8CVE-2023-35363EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  22. 7.2CVE-2023-35350EPSS 1.2%

    Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

  23. 7.8CVE-2023-35337EPSS 0.4%

    Win32k Elevation of Privilege Vulnerability

  24. 7.8CVE-2023-35305EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  25. 7.8CVE-2023-35304EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  26. 8.8CVE-2023-35302EPSS 1.4%

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  27. 7.8CVE-2023-33152EPSS 0.5%

    Microsoft ActiveX Remote Code Execution Vulnerability

  28. 4.9CVE-2023-32083EPSS 1.6%

    Microsoft Failover Cluster Information Disclosure Vulnerability

  29. 7.8CVE-2023-32047EPSS 0.9%

    Paint 3D Remote Code Execution Vulnerability

  30. 8.8CVE-2023-36824EPSS 77%

    Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corr…

  31. 7.8CVE-2023-37247EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while…

  32. 7.8CVE-2023-37246EPSS 0.3%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while…

  33. 7.8CVE-2023-34432EPSS 0.4%

    A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

  34. 7.8CVE-2023-34318EPSS 0.3%

    A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.

  35. 9.8CVE-2022-48512EPSS 0.5%

    Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.

  36. 7.8CVE-2023-27390EPSS 0.5%

    A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger t…

  37. 5.5CVE-2023-34474EPSS 0.4%

    A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an …

  38. 3.3CVE-2023-3291EPSS 0.4%

    Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

  39. 7.8CVE-2023-32028EPSS 0.7%

    Microsoft SQL OLE DB Remote Code Execution Vulnerability

  40. 7.8CVE-2023-32027EPSS 0.6%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  41. 7.8CVE-2023-32026EPSS 0.7%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  42. 7.8CVE-2023-32025EPSS 0.6%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  43. 7.8CVE-2023-24897EPSS 1.2%

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  44. 7.8CVE-2023-33146EPSS 0.8%

    Microsoft Office Remote Code Execution Vulnerability

  45. 7.8CVE-2023-33133EPSS 44%

    Microsoft Excel Remote Code Execution Vulnerability

  46. 6.5CVE-2023-33129EPSS 2.0%

    Microsoft SharePoint Server Denial of Service Vulnerability

  47. 8.8CVE-2023-29372EPSS 1.3%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  48. 7.8CVE-2023-29370EPSS 0.7%

    Windows Media Remote Code Execution Vulnerability

  49. 9.8CVE-2023-29363EPSS 1.9%

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  50. 8.8CVE-2023-29362EPSS 1.3%

    Remote Desktop Client Remote Code Execution Vulnerability