CWE-122 · Heap-based Buffer Overflow (page 26)
Page 26 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27395 | Critical | 9.0 | 2023-10-12 | A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specia… |
CVE-2023-36730 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36598 | High | 7.8 | 2023-10-10 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-36577 | High | 8.8 | 2023-10-10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36417 | High | 7.8 | 2023-10-10 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-43787 | High | 7.8 | 2023-10-10 | A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow… |
CVE-2023-5460 | Low | 3.5 | 2023-10-09 | A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some unknown processing of the component Mo… |
CVE-2023-3428 | Medium | 6.2 | 2023-10-04 | A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a s… |
CVE-2023-4911 | High | 7.8 | 2023-10-03 | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a… |
CVE-2023-5344 | High | 7.5 | 2023-10-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
CVE-2023-4264 | High | 7.1 | 2023-09-27 | Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem. |
CVE-2023-4504 | High | 7.0 | 2023-09-21 | Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflo… |
CVE-2023-32461 | Medium | 5.0 | 2023-09-15 | Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit th… |
CVE-2023-32643 | Medium | 5.3 | 2023-09-14 | A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not… |
CVE-2023-38147 | High | 8.8 | 2023-09-12 | Windows Miracast Wireless Display Remote Code Execution Vulnerability |
CVE-2023-38143 | High | 7.8 | 2023-09-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36793 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-36772 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36771 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36770 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36740 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36739 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-38076 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-38071 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-4781 | High | 7.8 | 2023-09-05 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. |
CVE-2023-4751 | High | 7.8 | 2023-09-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
CVE-2023-4738 | High | 7.8 | 2023-09-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. |
CVE-2023-4682 | Medium | 5.5 | 2023-08-31 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-40166 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFro… |
CVE-2023-40031 | High | 7.8 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This… |
CVE-2023-4322 | Critical | 9.8 | 2023-08-14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
CVE-2023-39947 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-39946 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-38212 | High | 7.8 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… |
CVE-2023-2905 | High | 8.8 | 2023-08-09 | Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web serv… |
CVE-2023-38170 | High | 7.8 | 2023-08-08 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2023-38154 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36896 | High | 7.8 | 2023-08-08 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-36865 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-36532 | Medium | 5.9 | 2023-08-08 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. |
CVE-2023-3180 | Medium | 6.0 | 2023-08-03 | A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for th… |
CVE-2023-4016 | Low | 2.5 | 2023-08-02 | Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unf… |
CVE-2023-21406 | High | 7.1 | 2023-07-25 | Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod… |
CVE-2022-46290 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted… |
CVE-2022-46289 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted… |
CVE-2023-3463 | Medium | 6.6 | 2023-07-19 | All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption… |
CVE-2022-24834 | High | 7.0 | 2023-07-13 | Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and r… |
CVE-2023-24474 | High | 7.5 | 2023-07-13 | Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message |
CVE-2023-2763 | High | 7.8 | 2023-07-12 | Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from R… |
CVE-2023-35374 | High | 7.8 | 2023-07-11 | Paint 3D Remote Code Execution Vulnerability |
CVE-2023-35363 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35350 | High | 7.2 | 2023-07-11 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability |
CVE-2023-35337 | High | 7.8 | 2023-07-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-35305 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35304 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35302 | High | 8.8 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-33152 | High | 7.0 | 2023-07-11 | Microsoft ActiveX Remote Code Execution Vulnerability |
CVE-2023-32083 | Medium | 6.5 | 2023-07-11 | Microsoft Failover Cluster Information Disclosure Vulnerability |
CVE-2023-32047 | High | 7.8 | 2023-07-11 | Paint 3D Remote Code Execution Vulnerability |
CVE-2023-36824 | High | 7.4 | 2023-07-11 | Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some ca… |
CVE-2023-37247 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-37246 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-34432 | High | 7.8 | 2023-07-10 | A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, cod… |
CVE-2023-34318 | High | 7.8 | 2023-07-10 | A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code exec… |
CVE-2022-48512 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perfor… |
CVE-2023-27390 | High | 7.8 | 2023-07-05 | A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arb… |
CVE-2023-34474 | Medium | 5.5 | 2023-06-16 | A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in open… |
CVE-2023-3291 | Low | 3.3 | 2023-06-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-32028 | High | 7.8 | 2023-06-16 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-32027 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-32026 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-32025 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-24897 | High | 7.8 | 2023-06-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-33146 | High | 7.8 | 2023-06-14 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33133 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-33129 | Medium | 6.5 | 2023-06-14 | Microsoft SharePoint Server Denial of Service Vulnerability |
CVE-2023-29372 | High | 8.8 | 2023-06-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-29370 | High | 7.8 | 2023-06-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-29363 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-29362 | High | 8.8 | 2023-06-14 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2023-27997 | Critical | 9.8 | 2023-06-13 | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and… |
CVE-2023-34488 | High | 7.8 | 2023-06-12 | NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages. |
CVE-2023-24014 | High | 7.8 | 2023-06-07 | Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitr… |
CVE-2023-0667 | Medium | 6.5 | 2023-06-07 | Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is suscep… |
CVE-2023-0666 | Medium | 6.5 | 2023-06-07 | Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-ba… |
CVE-2023-2157 | Medium | 5.5 | 2023-06-06 | A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing. |
CVE-2023-29344 | High | 7.8 | 2023-06-05 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-32324 | High | 7.5 | 2023-06-01 | OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch… |
CVE-2023-32307 | High | 7.5 | 2023-05-26 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freesw… |
CVE-2023-2804 | Medium | 6.5 | 2023-05-25 | A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only b… |
CVE-2023-30763 | High | 7.2 | 2023-05-12 | Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via lo… |
CVE-2023-29283 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-0854 | Critical | 9.8 | 2023-05-11 | Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an… |
CVE-2023-0851 | Critical | 9.8 | 2023-05-11 | Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netw… |
CVE-2023-29341 | High | 7.8 | 2023-05-09 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2023-24948 | High | 7.4 | 2023-05-09 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2023-24943 | Critical | 9.8 | 2023-05-09 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-27410 | Low | 2.7 | 2023-05-09 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` bi… |
CVE-2023-2241 | Medium | 5.3 | 2023-04-22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObje… |
CVE-2023-27911 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lea… |