CWE-122: Heap-based Buffer Overflow, page 64

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 5.5CVE-2022-42783EPSS 0.09%2023-02-12

   In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

2. 6.7CVE-2022-34454EPSS 0.2%2023-02-10

   Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters.

3. 7.8CVE-2023-0760EPSS 0.4%2023-02-09

   Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.

4. 7.8CVE-2022-45491EPSS 0.3%2023-02-03

   Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.

5. 7.1CVE-2022-34400EPSS 0.2%2023-02-01

   Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.

6. 9.8CVE-2023-23582EPSS 0.8%2023-01-30

   Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.

7. 9.8CVE-2022-41991EPSS 1.5%2023-01-26

   A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a networ…

8. 7.8CVE-2022-1892EPSS 0.3%2023-01-26

   A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

9. 7.8CVE-2022-1891EPSS 0.3%2023-01-26

   A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

10. 7.8CVE-2022-1890EPSS 0.3%2023-01-26

    A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

11. 7.8CVE-2022-42405EPSS 0.4%2023-01-26

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

12. 7.8CVE-2022-42403EPSS 0.5%2023-01-26

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

13. 7.8CVE-2023-0433EPSS 0.5%2023-01-21

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

14. 7.8CVE-2023-21605EPSS 2.6%2023-01-18

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of …

15. 7.8CVE-2023-21594EPSS 0.4%2023-01-13

    Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

16. 7.8CVE-2023-21587EPSS 0.4%2023-01-13

    Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

17. 7.8CVE-2023-0288EPSS 0.5%2023-01-13

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

18. 7.8CVE-2022-3160EPSS 0.5%2023-01-13

    The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

19. 8.8CVE-2022-43591EPSS 1.2%2023-01-12

    A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. Target application w…

20. 6.5CVE-2022-3437EPSS 3.9%2023-01-12

    A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffe…

21. 8.8CVE-2021-3966EPSS 0.5%2023-01-11

    usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.

22. 7.8CVE-2023-21793EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

23. 7.8CVE-2023-21792EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

24. 7.8CVE-2023-21791EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

25. 7.8CVE-2023-21790EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

26. 7.8CVE-2023-21787EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

27. 7.8CVE-2023-21786EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

28. 7.8CVE-2023-21785EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

29. 7.8CVE-2023-21783EPSS 1.1%2023-01-10

    3D Builder Remote Code Execution Vulnerability

30. 7.8CVE-2023-21782EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

31. 7.8CVE-2023-21781EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

32. 7.8CVE-2023-21780EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

33. 7.8CVE-2023-21738EPSS 0.7%2023-01-10

    Microsoft Office Visio Remote Code Execution Vulnerability

34. 7.8CVE-2023-21737EPSS 0.7%2023-01-10

    Microsoft Office Visio Remote Code Execution Vulnerability

35. 7.0CVE-2023-21733EPSS 0.3%2023-01-10

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

36. 6.6CVE-2023-21560EPSS 1.2%2023-01-10

    Windows Boot Manager Security Feature Bypass Vulnerability

37. 7.8CVE-2023-0051EPSS 0.5%2023-01-04

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

38. 5.5CVE-2022-44430EPSS 0.09%2023-01-04

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

39. 5.5CVE-2022-44429EPSS 0.09%2023-01-04

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

40. 5.5CVE-2022-44428EPSS 0.09%2023-01-04

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

41. 5.5CVE-2022-44427EPSS 0.1%2023-01-04

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

42. 9.8CVE-2022-23547EPSS 1.0%2022-12-23

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread…

43. 8.1CVE-2022-43602EPSS 2.1%2022-12-22

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious…

44. 8.1CVE-2022-43601EPSS 1.8%2022-12-22

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious…

45. 8.1CVE-2022-43600EPSS 1.8%2022-12-22

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious…

46. 8.1CVE-2022-43599EPSS 2.1%2022-12-22

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious…

47. 8.1CVE-2022-43598EPSS 1.9%2022-12-22

    Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can pro…

48. 8.1CVE-2022-43597EPSS 2.0%2022-12-22

    Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can pro…

49. 9.8CVE-2022-41838EPSS 1.9%2022-12-22

    A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger t…

50. 9.8CVE-2022-41794EPSS 2.0%2022-12-22

    A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger th…