CWE-122: Heap-based Buffer Overflow, page 63

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 7.8CVE-2023-25890EPSS 0.4%2023-03-28

   Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

2. 7.8CVE-2023-25885EPSS 0.4%2023-03-28

   Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

3. 7.8CVE-2023-25883EPSS 0.4%2023-03-28

   Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

4. 7.8CVE-2023-25882EPSS 0.4%2023-03-28

   Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

5. 8.8CVE-2022-24672EPSS 1.2%2023-03-28

   This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists wi…

6. 7.5CVE-2023-0210EPSS 72%2023-03-27

   A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.

7. 7.8CVE-2023-25874EPSS 0.4%2023-03-27

   Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

8. 7.8CVE-2023-25872EPSS 0.4%2023-03-27

   Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

9. 7.8CVE-2023-25868EPSS 0.4%2023-03-27

   Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

10. 7.8CVE-2023-25864EPSS 0.4%2023-03-27

    Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

11. 7.8CVE-2023-1655EPSS 0.5%2023-03-27

    Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.

12. 9.8CVE-2023-25668EPSS 0.8%2023-03-25

    TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be inclu…

13. 9.8CVE-2023-25664EPSS 0.4%2023-03-25

    TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.

14. 5.9CVE-2023-20081EPSS 0.7%2023-03-23

    A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remot…

15. 7.8CVE-2023-20029EPSS 0.2%2023-03-23

    A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the …

16. 5.5CVE-2023-1570EPSS 0.4%2023-03-22

    A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file tiny_dng_loader.h. The manipulation leads to heap-based buffer overflow. Local a…

17. 7.8CVE-2023-1448EPSS 0.4%2023-03-17

    A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. …

18. 7.5CVE-2023-27585EPSS 2.3%2023-03-14

    PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJ…

19. 8.8CVE-2023-24913EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

20. 8.8CVE-2023-24907EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

21. 8.8CVE-2023-24876EPSS 1.4%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

22. 8.8CVE-2023-24868EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

23. 8.8CVE-2023-24867EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

24. 9.8CVE-2023-23415EPSS 3.5%2023-03-14

    Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

25. 8.8CVE-2023-23406EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

26. 8.8CVE-2023-23403EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

27. 7.2CVE-2023-23400EPSS 1.3%2023-03-14

    Windows DNS Server Remote Code Execution Vulnerability

28. 6.6CVE-2023-1170EPSS 0.5%2023-03-03

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

29. 5.5CVE-2023-1010EPSS 0.4%2023-02-24

    A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. Th…

30. 7.8CVE-2023-22236EPSS 0.4%2023-02-17

    Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re…

31. 7.8CVE-2023-0866EPSS 0.5%2023-02-16

    Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.

32. 7.8CVE-2023-23782EPSS 0.2%2023-02-16

    A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privileg…

33. 8.8CVE-2023-0841EPSS 1.2%2023-02-15

    A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. Th…

34. 7.8CVE-2023-23381EPSS 0.4%2023-02-14

    Visual Studio Remote Code Execution Vulnerability

35. 7.8CVE-2023-23390EPSS 0.7%2023-02-14

    3D Builder Remote Code Execution Vulnerability

36. 7.8CVE-2023-23378EPSS 0.7%2023-02-14

    Print 3D Remote Code Execution Vulnerability

37. 7.8CVE-2023-23377EPSS 0.7%2023-02-14

    3D Builder Remote Code Execution Vulnerability

38. 7.8CVE-2023-23376KEVEPSS 11%2023-02-14

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

39. 7.8CVE-2023-21812EPSS 3.3%2023-02-14

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

40. 7.8CVE-2023-21804EPSS 0.4%2023-02-14

    Windows Graphics Component Elevation of Privilege Vulnerability

41. 8.8CVE-2023-21799EPSS 1.2%2023-02-14

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

42. 8.8CVE-2023-21695EPSS 1.1%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

43. 6.8CVE-2023-21694EPSS 0.6%2023-02-14

    Windows Fax Service Remote Code Execution Vulnerability

44. 9.8CVE-2023-21692EPSS 21%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

45. 9.8CVE-2023-21690EPSS 28%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

46. 9.8CVE-2023-21689EPSS 27%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

47. 7.8CVE-2023-21528EPSS 0.4%2023-02-14

    Microsoft SQL Server Remote Code Execution Vulnerability

48. 7.8CVE-2023-24551EPSS 0.2%2023-02-14

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted P…

49. 7.8CVE-2023-24550EPSS 0.2%2023-02-14

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. …

50. 7.8CVE-2023-0819EPSS 0.4%2023-02-13

    Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.