CWE-122 · Heap-based Buffer Overflow (page 16)
Page 16 of 27 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10525 | Critical | 9.8 | 2024-10-30 | In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto… |
CVE-2024-9632 | High | 7.8 | 2024-10-30 | A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow… |
CVE-2024-8594 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can lev… |
CVE-2024-8591 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious act… |
CVE-2024-8587 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious acto… |
CVE-2024-43587 | Medium | 5.9 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43579 | High | 7.6 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43578 | High | 7.6 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-47964 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker c… |
CVE-2024-45143 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45139 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-47417 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2024-43611 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43608 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43607 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43593 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43592 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43589 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43564 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43560 | High | 7.8 | 2024-10-08 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability |
CVE-2024-43528 | High | 7.8 | 2024-10-08 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-43527 | High | 7.8 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-43526 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43525 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43523 | Medium | 6.8 | 2024-10-08 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-43522 | High | 7.0 | 2024-10-08 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
CVE-2024-43518 | High | 8.8 | 2024-10-08 | Windows Telephony Server Remote Code Execution Vulnerability |
CVE-2024-43517 | High | 8.8 | 2024-10-08 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability |
CVE-2024-43480 | Medium | 6.6 | 2024-10-08 | Azure Service Fabric for Linux Remote Code Execution Vulnerability |
CVE-2024-43453 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38265 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38261 | High | 7.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38212 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-41981 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The af… |
CVE-2024-6444 | Medium | 6.3 | 2024-10-04 | No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c. |
CVE-2024-45872 | Medium | 6.3 | 2024-10-03 | Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability occurs due to insufficient validation of PSD files. |
CVE-2024-20522 | Medium | 6.5 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20517 | Medium | 6.8 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20516 | Medium | 6.8 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-46264 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h. |
CVE-2024-7674 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage… |
CVE-2024-7673 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage t… |
CVE-2024-45993 | Medium | 6.5 | 2024-09-30 | Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. |
CVE-2024-38796 | Medium | 5.9 | 2024-09-27 | EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A success… |
CVE-2024-46632 | Medium | 4.3 | 2024-09-26 | Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function. |
CVE-2024-46488 | Medium | 5.5 | 2024-09-25 | sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Se… |
CVE-2024-20508 | Medium | 5.8 | 2024-09-25 | A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthenticated… |
CVE-2024-46461 | High | 8.0 | 2024-09-25 | VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stre… |
CVE-2024-7018 | High | 7.8 | 2024-09-23 | Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (C… |
CVE-2024-45679 | High | 8.4 | 2024-09-18 | Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted f… |
CVE-2022-39068 | Medium | 4.5 | 2024-09-18 | There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vul… |
CVE-2024-8905 | High | 8.8 | 2024-09-17 | Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML… |
CVE-2024-8948 | High | 7.3 | 2024-09-17 | A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. Th… |
CVE-2024-8946 | High | 7.3 | 2024-09-17 | A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the com… |
CVE-2024-38812 | Critical | 9.8 | 2024-09-17 | The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server… |
CVE-2024-6259 | High | 7.6 | 2024-09-13 | BT: HCI: adv_ext_report Improper discarding in adv_ext_report |
CVE-2024-6135 | High | 7.6 | 2024-09-13 | BT:Classic: Multiple missing buf length checks |
CVE-2024-6258 | Medium | 6.8 | 2024-09-13 | BT: Missing length checks of net_buf in rfcomm_handle_data |
CVE-2024-43756 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2024-39380 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-8636 | High | 8.8 | 2024-09-11 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-38242 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38238 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38237 | High | 7.8 | 2024-09-10 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38045 | High | 8.1 | 2024-09-10 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2024-37335 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-26191 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-21416 | High | 8.1 | 2024-09-10 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2024-8443 | Low | 2.9 | 2024-09-10 | A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs… |
CVE-2024-40754 | Critical | 9.8 | 2024-09-10 | Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0. |
CVE-2024-33698 | Critical | 9.8 | 2024-09-10 | A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMA… |
CVE-2024-32763 | High | 8.8 | 2024-09-06 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2024-45306 | Medium | 4.5 | 2024-09-02 | Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cur… |
CVE-2024-8198 | High | 8.8 | 2024-08-28 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2024-8193 | High | 8.8 | 2024-08-28 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2024-42851 | High | 7.8 | 2024-08-27 | Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the paresetag function. |
CVE-2024-43802 | Medium | 4.5 | 2024-08-26 | Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not… |
CVE-2024-43790 | Medium | 4.5 | 2024-08-22 | Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern… |
CVE-2024-7973 | High | 8.8 | 2024-08-21 | Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file… |
CVE-2024-7967 | High | 8.8 | 2024-08-21 | Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-42438 | Medium | 6.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via netw… |
CVE-2024-42437 | Medium | 6.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via netw… |
CVE-2024-42436 | Medium | 6.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via netw… |
CVE-2024-39825 | High | 8.5 | 2024-08-14 | Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access. |
CVE-2024-41853 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-41850 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-38172 | High | 7.8 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38170 | High | 7.1 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38169 | High | 7.8 | 2024-08-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-38161 | Medium | 6.8 | 2024-08-13 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-38160 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38154 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38152 | High | 7.8 | 2024-08-13 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-38142 | High | 7.8 | 2024-08-13 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-38130 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38121 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38120 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38116 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38115 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38114 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |