CWE-122: Heap-based Buffer Overflow, page 66

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 7.8CVE-2022-36842EPSS 0.1%2022-09-09

   A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

2. 7.8CVE-2022-36841EPSS 0.1%2022-09-09

   A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

3. 5.5CVE-2022-25309EPSS 0.5%2022-09-06

   A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi …

4. 8.8CVE-2022-2915EPSS 6.9%2022-08-26

   A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.…

5. 6.7CVE-2022-2991EPSS 0.5%2022-08-25

   A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnera…

6. 7.8CVE-2022-26061EPSS 0.7%2022-08-22

   A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

7. 7.8CVE-2022-2849EPSS 0.5%2022-08-17

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.

8. 7.8CVE-2022-2819EPSS 0.6%2022-08-15

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.

9. 7.8CVE-2022-35677EPSS 0.5%2022-08-11

   Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…

10. 7.8CVE-2022-35676EPSS 0.5%2022-08-11

    Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…

11. 7.8CVE-2022-2580EPSS 0.5%2022-08-01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.

12. 7.8CVE-2022-2571EPSS 0.5%2022-08-01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.

13. 7.8CVE-2022-2522EPSS 0.6%2022-07-25

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.

14. 8.8CVE-2022-31144EPSS 3.2%2022-07-19

    Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7…

15. 7.8CVE-2022-2122EPSS 0.5%2022-07-19

    DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc u…

16. 7.8CVE-2022-1925EPSS 0.5%2022-07-19

    DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matr…

17. 7.8CVE-2022-1924EPSS 0.4%2022-07-19

    DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending o…

18. 7.8CVE-2022-1923EPSS 0.4%2022-07-19

    DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending…

19. 7.8CVE-2022-1922EPSS 0.5%2022-07-19

    DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS.…

20. 7.8CVE-2022-1920EPSS 0.5%2022-07-19

    Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

21. 7.8CVE-2022-34250EPSS 0.5%2022-07-15

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…

22. 7.8CVE-2022-34249EPSS 0.5%2022-07-15

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…

23. 7.8CVE-2022-34246EPSS 0.5%2022-07-15

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…

24. 7.8CVE-2022-34245EPSS 0.5%2022-07-15

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…

25. 7.8CVE-2022-34241EPSS 0.5%2022-07-15

    Adobe Character Animator version 4.4.7 (and earlier) and 22.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…

26. 10.0CVE-2022-34819EPSS 2.1%2022-07-12

    A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC…

27. 7.8CVE-2022-2344EPSS 1.3%2022-07-08

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

28. 7.8CVE-2022-2343EPSS 1.4%2022-07-08

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.

29. 7.8CVE-2022-2284EPSS 1.4%2022-07-02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

30. 7.8CVE-2022-2264EPSS 1.3%2022-07-01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

31. 7.8CVE-2022-2207EPSS 1.4%2022-06-27

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

32. 8.8CVE-2022-32137EPSS 1.4%2022-06-24

    In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.

33. 7.8CVE-2022-2182EPSS 1.5%2022-06-23

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

34. 7.5CVE-2021-45918EPSS 1.5%2022-06-20

    NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved fo…

35. 7.8CVE-2022-2125EPSS 1.6%2022-06-19

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

36. 7.8CVE-2022-30654EPSS 6.4%2022-06-16

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…

37. 7.8CVE-2022-30650EPSS 6.4%2022-06-16

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…

38. 7.8CVE-2022-30661EPSS 6.4%2022-06-16

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…

39. 7.8CVE-2022-30658EPSS 6.4%2022-06-16

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…

40. 3.3CVE-2022-2061EPSS 0.4%2022-06-13

    Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.

41. 7.8CVE-2022-30540EPSS 1.0%2022-06-02

    The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

42. 9.8CVE-2022-31003EPSS 4.1%2022-05-31

    Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An…

43. 7.8CVE-2022-1942EPSS 1.6%2022-05-31

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

44. 7.8CVE-2022-1886EPSS 1.4%2022-05-26

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

45. 5.5CVE-2022-29210EPSS 0.2%2022-05-21

    TensorFlow is an open source platform for machine learning. In version 2.8.0, the `TensorKey` hash function used total estimated `AllocatedBytes()`, which (a) is an estimate per tensor, and (b) is a very poor hash function for constants (e…

46. 7.8CVE-2022-1733EPSS 0.6%2022-05-17

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.

47. 7.8CVE-2022-28234EPSS 5.3%2022-05-11

    Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulti…

48. 7.8CVE-2022-1621EPSS 2.4%2022-05-10

    Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

49. 7.8CVE-2022-1619EPSS 2.6%2022-05-08

    Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution

50. 9.8CVE-2021-38439EPSS 2.8%2022-05-05

    All versions of GurumDDS are vulnerable to heap-based buffer overflow, which may cause a denial-of-service condition or remotely execute arbitrary code.