CWE-122: Heap-based Buffer Overflow, page 69

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

1. 7.5CVE-2021-37199EPSS 1.1%2021-10-12

   A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to ca…

2. 7.8CVE-2021-25495EPSS 0.3%2021-10-06

   A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.

3. 7.2CVE-2021-25479EPSS 0.6%2021-10-06

   A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.

4. 6.7CVE-2021-25475EPSS 0.1%2021-10-06

   A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.

5. 6.8CVE-2021-31986EPSS 0.8%2021-10-05

   User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.

6. 9.8CVE-2021-3625EPSS 2.3%2021-10-05

   Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363

7. 8.8CVE-2021-32626EPSS 16%2021-10-04

   Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This…

8. 7.8CVE-2021-36051EPSS 5.8%2021-10-04

   XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must …

9. 7.8CVE-2021-39863EPSS 13%2021-09-29

   Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker c…

10. 7.8CVE-2021-39823EPSS 4.2%2021-09-27

    Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution…

11. 9.8CVE-2021-32959EPSS 0.9%2021-09-23

    Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06

12. 9.8CVE-2021-34770EPSS 3.0%2021-09-23

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to execute …

13. 7.8CVE-2021-38404EPSS 1.0%2021-09-17

    Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to e…

14. 7.8CVE-2021-3778EPSS 1.7%2021-09-15

    vim is vulnerable to Heap-based Buffer Overflow

15. 9.8CVE-2021-25449EPSS 0.4%2021-09-09

    An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.

16. 7.8CVE-2021-26603EPSS 0.7%2021-09-09

    A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.

17. 7.8CVE-2021-3770EPSS 0.7%2021-09-06

    vim is vulnerable to Heap-based Buffer Overflow

18. 8.8CVE-2021-28560EPSS 67%2021-09-02

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vul…

19. 8.8CVE-2021-28558EPSS 10%2021-09-02

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated att…

20. 7.8CVE-2021-36073EPSS 7.5%2021-09-01

    Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitat…

21. 7.8CVE-2021-36065EPSS 5.7%2021-09-01

    Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…

22. 5.5CVE-2021-36056EPSS 4.4%2021-09-01

    XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must …

23. 3.3CVE-2021-36054EPSS 3.7%2021-09-01

    XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a v…

24. 7.8CVE-2021-36050EPSS 5.4%2021-09-01

    XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must …

25. 7.8CVE-2021-33007EPSS 1.1%2021-08-30

    A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code.

26. 7.8CVE-2021-28629EPSS 7.8%2021-08-24

    Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exp…

27. 7.8CVE-2021-28620EPSS 7.8%2021-08-24

    Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exp…

28. 7.8CVE-2021-28610EPSS 5.7%2021-08-24

    Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi…

29. 7.8CVE-2021-28608EPSS 5.9%2021-08-24

    Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi…

30. 7.8CVE-2021-28604EPSS 5.3%2021-08-24

    Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi…

31. 7.8CVE-2021-28603EPSS 5.3%2021-08-24

    Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi…

32. 7.8CVE-2021-28638EPSS 4.9%2021-08-20

    Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerabilit…

33. 7.8CVE-2021-28624EPSS 7.2%2021-08-20

    Adobe Bridge version 11.0.2 (and earlier) are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exp…

34. 9.8CVE-2021-21825EPSS 2.3%2021-08-18

    A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide…

35. 9.8CVE-2021-21810EPSS 1.1%2021-08-17

    A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulne…

36. 9.8CVE-2021-21830EPSS 2.3%2021-08-13

    A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to t…

37. 9.8CVE-2021-21829EPSS 2.5%2021-08-13

    A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provi…

38. 9.8CVE-2021-33485EPSS 1.3%2021-08-03

    CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.

39. 9.8CVE-2021-24036EPSS 3.3%2021-07-23

    Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22…

40. 7.8CVE-2021-34329EPSS 2.1%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper val…

41. 7.8CVE-2021-34328EPSS 2.1%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper val…

42. 7.8CVE-2021-34327EPSS 2.1%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper val…

43. 7.8CVE-2021-34326EPSS 2.1%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper val…

44. 7.8CVE-2021-34317EPSS 1.9%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCX files.…

45. 7.8CVE-2021-34313EPSS 1.9%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

46. 7.8CVE-2021-34312EPSS 1.9%2021-07-13

    A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF file…

47. 7.8CVE-2020-28598EPSS 1.3%2021-07-08

    An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted AMF file can lead to code execution. An attacker can…

48. 7.8CVE-2021-33000EPSS 1.0%2021-06-24

    Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

49. 7.5CVE-2021-21572EPSS 0.3%2021-06-24

    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.

50. 7.8CVE-2021-31485EPSS 1.4%2021-06-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page …