cve.bz

CWE-122: Heap-based Buffer Overflow, page 68

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2021-44000EPSS 1.8%

    A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visu…

  2. 7.1CVE-2022-0518EPSS 1.0%

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.

  3. 6.8CVE-2021-3861EPSS 0.5%

    The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hv…

  4. 8.8CVE-2021-3835EPSS 0.7%

    Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf

  5. 8.1CVE-2021-21962EPSS 2.0%

    A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A series of specially-crafted MQTT payloads can lead to remote code execution. An attacker must…

  6. 7.8CVE-2022-0417EPSS 1.5%

    Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.

  7. 7.8CVE-2022-0407EPSS 1.2%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  8. 7.8CVE-2022-0392EPSS 1.5%

    Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

  9. 7.8CVE-2022-0361EPSS 1.6%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  10. 7.8CVE-2022-0359EPSS 1.3%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  11. 9.8CVE-2022-0318EPSS 2.0%

    Heap-based Buffer Overflow in vim/vim prior to 8.2.

  12. 7.8CVE-2022-0261EPSS 1.7%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  13. 7.8CVE-2021-44709EPSS 29%

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary co…

  14. 7.8CVE-2021-44708EPSS 38%

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary co…

  15. 7.8CVE-2021-23157EPSS 7.6%

    WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

  16. 6.6CVE-2022-0213EPSS 1.3%

    vim is vulnerable to Heap-based Buffer Overflow

  17. 7.8CVE-2021-34945EPSS 2.0%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  18. 7.8CVE-2021-34938EPSS 1.9%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  19. 7.8CVE-2021-34907EPSS 2.1%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  20. 7.8CVE-2021-34905EPSS 2.1%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  21. 7.8CVE-2021-34904EPSS 2.1%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  22. 7.8CVE-2021-34900EPSS 2.1%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  23. 7.8CVE-2021-34896EPSS 2.1%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  24. 7.8CVE-2021-34893EPSS 2.1%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  25. 7.8CVE-2021-34871EPSS 2.0%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

  26. 3.3CVE-2022-0158EPSS 1.7%

    vim is vulnerable to Heap-based Buffer Overflow

  27. 9.8CVE-2021-24042EPSS 1.3%

    The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp…

  28. 9.8CVE-2022-0080EPSS 1.6%

    mruby is vulnerable to Heap-based Buffer Overflow

  29. 5.5CVE-2021-45949EPSS 1.7%

    Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).

  30. 7.8CVE-2021-38415EPSS 1.0%

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.

  31. 7.8CVE-2021-4136EPSS 2.0%

    vim is vulnerable to Heap-based Buffer Overflow

  32. 7.8CVE-2021-44445EPSS 0.8%

    A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specia…

  33. 7.8CVE-2021-44442EPSS 0.8%

    A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specia…

  34. 8.8CVE-2021-20043EPSS 23%

    A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 a…

  35. 9.8CVE-2021-24041EPSS 1.2%

    A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.

  36. 7.8CVE-2021-3984EPSS 1.6%

    vim is vulnerable to Heap-based Buffer Overflow

  37. 7.8CVE-2021-4019EPSS 1.9%

    vim is vulnerable to Heap-based Buffer Overflow

  38. 7.8CVE-2021-3973EPSS 1.8%

    vim is vulnerable to Heap-based Buffer Overflow

  39. 8.0CVE-2021-3968EPSS 2.2%

    vim is vulnerable to Heap-based Buffer Overflow

  40. 5.5CVE-2021-26330EPSS 0.2%

    AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.

  41. 8.1CVE-2021-41253EPSS 1.9%

    Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append untrusted user data to the formatter buffer within their custom formatter hooks can…

  42. 7.8CVE-2021-3927EPSS 1.7%

    vim is vulnerable to Heap-based Buffer Overflow

  43. 5.5CVE-2021-22564EPSS 0.3%

    For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in th…

  44. 9.8CVE-2021-3756EPSS 1.1%

    libmysofa is vulnerable to Heap-based Buffer Overflow

  45. 7.8CVE-2021-3903EPSS 0.6%

    vim is vulnerable to Heap-based Buffer Overflow

  46. 7.5CVE-2021-34583EPSS 8.8%

    Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

  47. 7.8CVE-2021-3872EPSS 1.5%

    vim is vulnerable to Heap-based Buffer Overflow

  48. 9.8CVE-2021-33023EPSS 2.3%

    Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

  49. 5.5CVE-2021-3875EPSS 1.5%

    vim is vulnerable to Heap-based Buffer Overflow

  50. 10.0CVE-2021-21940EPSS 1.3%

    A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious pac…