CWE-122: Heap-based Buffer Overflow, page 62

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 9.8CVE-2023-27997KEVEPSS 86%2023-06-13

   A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version …

2. 7.8CVE-2023-34488EPSS 0.5%2023-06-12

   NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.

3. 7.8CVE-2023-24014EPSS 0.2%2023-06-07

   Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

4. 6.5CVE-2023-0667EPSS 2.0%2023-06-07

   Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the contex…

5. 6.5CVE-2023-0666EPSS 2.3%2023-06-07

   Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process r…

6. 5.5CVE-2023-2157EPSS 1.0%2023-06-06

   A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.

7. 7.8CVE-2023-29344EPSS 0.9%2023-06-05

   Microsoft Office Remote Code Execution Vulnerability

8. 5.5CVE-2023-32324EPSS 1.5%2023-06-01

   OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the functio…

9. 7.5CVE-2023-32307EPSS 1.1%2023-05-26

   Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential…

10. 6.5CVE-2023-2804EPSS 1.2%2023-05-25

    A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data ty…

11. 6.7CVE-2023-30763EPSS 0.2%2023-05-12

    Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.

12. 7.8CVE-2023-29283EPSS 0.4%2023-05-11

    Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

13. 9.8CVE-2023-0854EPSS 1.2%2023-05-11

    Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unrespons…

14. 9.8CVE-2023-0851EPSS 1.1%2023-05-11

    Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arb…

15. 7.8CVE-2023-29341EPSS 0.7%2023-05-09

    AV1 Video Extension Remote Code Execution Vulnerability

16. 7.4CVE-2023-24948EPSS 1.0%2023-05-09

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

17. 9.8CVE-2023-24943EPSS 4.7%2023-05-09

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

18. 2.7CVE-2023-27410EPSS 0.6%2023-05-09

    A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 c…

19. 5.3CVE-2023-2241EPSS 0.4%2023-04-22

    A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObject.cpp. The manipulation leads to heap-based buffer overflow. An attack has to b…

20. 7.8CVE-2023-27911EPSS 0.6%2023-04-17

    A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.

21. 7.8CVE-2023-26416EPSS 0.4%2023-04-13

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…

22. 7.8CVE-2023-26413EPSS 0.4%2023-04-13

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…

23. 7.8CVE-2023-26394EPSS 0.4%2023-04-12

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

24. 5.5CVE-2023-1906EPSS 0.6%2023-04-12

    A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allo…

25. 7.8CVE-2023-28311ExploitEPSS 2.7%2023-04-11

    Microsoft Word Remote Code Execution Vulnerability

26. 7.8CVE-2023-28292EPSS 0.6%2023-04-11

    Raw Image Extension Remote Code Execution Vulnerability

27. 8.8CVE-2023-28275EPSS 1.5%2023-04-11

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

28. 6.8CVE-2023-28269EPSS 0.6%2023-04-11

    Windows Boot Manager Security Feature Bypass Vulnerability

29. 7.8CVE-2023-28262EPSS 0.4%2023-04-11

    Visual Studio Elevation of Privilege Vulnerability

30. 7.2CVE-2023-28254EPSS 1.4%2023-04-11

    Windows DNS Server Remote Code Execution Vulnerability

31. 7.8CVE-2023-28252KEVExploitEPSS 49%2023-04-11

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

32. 8.8CVE-2023-28240EPSS 0.8%2023-04-11

    Windows Network Load Balancing Remote Code Execution Vulnerability

33. 8.8CVE-2023-28231EPSS 37%2023-04-11

    DHCP Server Service Remote Code Execution Vulnerability

34. 7.5CVE-2023-28227EPSS 6.6%2023-04-11

    Windows Bluetooth Driver Remote Code Execution Vulnerability

35. 7.8CVE-2023-28225EPSS 0.4%2023-04-11

    Windows NTLM Elevation of Privilege Vulnerability

36. 7.0CVE-2023-28218EPSS 12%2023-04-11

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

37. 8.8CVE-2023-24928EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

38. 8.8CVE-2023-24926EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

39. 7.8CVE-2023-24912EPSS 3.6%2023-04-11

    Windows Graphics Component Elevation of Privilege Vulnerability

40. 7.3CVE-2023-23384EPSS 0.9%2023-04-11

    Microsoft SQL Server Remote Code Execution Vulnerability

41. 8.8CVE-2023-21727EPSS 1.6%2023-04-11

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

42. 7.8CVE-2023-22660EPSS 0.5%2023-04-05

    A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which c…

43. 7.8CVE-2022-45115EPSS 0.5%2023-04-05

    A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

44. 7.1CVE-2023-0208EPSS 0.2%2023-04-01

    NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket. A successful exploit of this vulnerability may lead to denial of service and data…

45. 8.8CVE-2022-43648EPSS 0.9%2023-03-29

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the …

46. 9.8CVE-2022-43634EPSS 19%2023-03-29

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue…

47. 9.1CVE-2022-2848EPSS 3.4%2023-03-29

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of…

48. 7.8CVE-2023-25898EPSS 0.4%2023-03-28

    Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

49. 7.8CVE-2023-25897EPSS 0.4%2023-03-28

    Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

50. 7.8CVE-2023-25895EPSS 0.4%2023-03-28

    Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…