CWE-122: Heap-based Buffer Overflow, page 65

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 9.8CVE-2022-41639EPSS 1.9%2022-12-22

   A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can resul…

2. 9.8CVE-2022-23537EPSS 1.1%2022-12-20

   PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN mess…

3. 8.8CVE-2022-4584EPSS 1.1%2022-12-17

   A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack m…

4. 8.6CVE-2022-2601EPSS 0.5%2022-12-14

   A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buff…

5. 7.8CVE-2022-44910EPSS 0.4%2022-12-14

   Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c.

6. 7.5CVE-2022-44654EPSS 0.8%2022-12-12

   Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps to monitor for malicious payloads. The affected component's …

7. 7.8CVE-2022-2948EPSS 0.2%2022-12-07

   GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

8. 7.8CVE-2022-3491EPSS 0.5%2022-12-03

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.

9. 9.8CVE-2022-3520EPSS 1.1%2022-12-02

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.

10. 7.8CVE-2022-4141EPSS 0.5%2022-11-25

    Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

11. 6.5CVE-2022-43171EPSS 0.7%2022-11-17

    A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.

12. 9.8CVE-2022-24942EPSS 2.4%2022-11-15

    Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTTP request.

13. 7.5CVE-2022-20946EPSS 0.9%2022-11-15

    A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff…

14. 7.8CVE-2022-45188EPSS 0.6%2022-11-12

    Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).

15. 7.8CVE-2022-39136EPSS 0.3%2022-11-08

    A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V13.3 (All versions >…

16. 7.5CVE-2022-2809EPSS 0.8%2022-10-27

    A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how…

17. 7.8CVE-2022-2069EPSS 0.5%2022-10-20

    The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow a…

18. 8.8CVE-2022-39260EPSS 4.0%2022-10-19

    Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5,…

19. 9.8CVE-2022-35712EPSS 38%2022-10-14

    Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this …

20. 9.8CVE-2022-35711EPSS 74%2022-10-14

    Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this …

21. 7.8CVE-2022-37864EPSS 0.2%2022-10-11

    A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an a…

22. 7.8CVE-2022-39852EPSS 0.2%2022-10-07

    A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution.

23. 9.8CVE-2022-38742EPSS 23%2022-09-23

    Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the T…

24. 7.1CVE-2022-2347EPSS 0.6%2022-09-23

    There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Cons…

25. 7.8CVE-2022-2566EPSS 0.8%2022-09-23

    A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead…

26. 9.8CVE-2022-36934EPSS 2.5%2022-09-22

    An integer overflow in WhatsApp could result in remote code execution in an established video call.

27. 7.8CVE-2022-35708EPSS 0.6%2022-09-19

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

28. 7.8CVE-2022-35706EPSS 0.7%2022-09-19

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

29. 7.8CVE-2022-3234EPSS 0.5%2022-09-17

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.

30. 7.8CVE-2022-38433EPSS 0.5%2022-09-16

    Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue …

31. 7.8CVE-2022-38432EPSS 0.6%2022-09-16

    Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue …

32. 7.8CVE-2022-38415EPSS 0.5%2022-09-16

    Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…

33. 7.8CVE-2022-38414EPSS 0.5%2022-09-16

    Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…

34. 7.8CVE-2022-38413EPSS 0.5%2022-09-16

    Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…

35. 7.8CVE-2022-38405EPSS 0.6%2022-09-16

    Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

36. 7.8CVE-2022-38404EPSS 0.6%2022-09-16

    Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

37. 7.8CVE-2022-38401EPSS 0.5%2022-09-16

    Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…

38. 7.8CVE-2022-38411EPSS 0.7%2022-09-16

    Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re…

39. 7.8CVE-2022-40661EPSS 0.9%2022-09-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious…

40. 7.8CVE-2022-40660EPSS 1.2%2022-09-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious…

41. 7.8CVE-2022-40655EPSS 1.1%2022-09-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious…

42. 3.3CVE-2022-38701EPSS 0.2%2022-09-09

    OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.

43. 7.8CVE-2022-36863EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

44. 7.8CVE-2022-36862EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

45. 7.8CVE-2022-36860EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

46. 7.8CVE-2022-36858EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

47. 7.8CVE-2022-36846EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

48. 7.8CVE-2022-36845EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

49. 7.8CVE-2022-36844EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

50. 7.8CVE-2022-36843EPSS 0.1%2022-09-09

    A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.