CWE-122 · Heap-based Buffer Overflow (page 27)
Page 27 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26416 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26413 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26394 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2023-1906 | Medium | 5.5 | 2023-04-12 | A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass… |
CVE-2023-28311 | High | 7.8 | 2023-04-11 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-28292 | High | 7.8 | 2023-04-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-28275 | High | 8.8 | 2023-04-11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-28269 | Medium | 6.2 | 2023-04-11 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2023-28262 | High | 7.8 | 2023-04-11 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-28254 | High | 7.2 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28252 | High | 7.8 | 2023-04-11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-28240 | High | 8.8 | 2023-04-11 | Windows Network Load Balancing Remote Code Execution Vulnerability |
CVE-2023-28231 | High | 8.8 | 2023-04-11 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2023-28227 | High | 7.5 | 2023-04-11 | Windows Bluetooth Driver Remote Code Execution Vulnerability |
CVE-2023-28225 | High | 7.8 | 2023-04-11 | Windows NTLM Elevation of Privilege Vulnerability |
CVE-2023-28218 | High | 7.0 | 2023-04-11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2023-24928 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24926 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24912 | High | 7.8 | 2023-04-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-23384 | High | 7.3 | 2023-04-11 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21727 | High | 8.8 | 2023-04-11 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-22660 | High | 7.0 | 2023-04-05 | A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially cra… |
CVE-2022-45115 | High | 7.8 | 2023-04-05 | A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corru… |
CVE-2023-0208 | High | 8.4 | 2023-04-01 | NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket… |
CVE-2022-43648 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is… |
CVE-2022-43634 | Critical | 9.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln… |
CVE-2022-2848 | Critical | 9.1 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not require… |
CVE-2023-25898 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-25897 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-25895 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-25890 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-25885 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-25883 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-25882 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-24672 | High | 8.8 | 2023-03-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentic… |
CVE-2023-0210 | High | 7.5 | 2023-03-27 | A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems. |
CVE-2023-25874 | High | 7.8 | 2023-03-27 | Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-25872 | High | 7.8 | 2023-03-27 | Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-25868 | High | 7.8 | 2023-03-27 | Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-25864 | High | 7.8 | 2023-03-27 | Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-1655 | High | 7.8 | 2023-03-27 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0. |
CVE-2023-25668 | Critical | 9.8 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the con… |
CVE-2023-25664 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is incl… |
CVE-2023-20081 | Medium | 6.8 | 2023-03-23 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cis… |
CVE-2023-20029 | Medium | 4.4 | 2023-03-23 | A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affe… |
CVE-2023-1570 | Low | 3.3 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file… |
CVE-2023-1448 | Medium | 5.3 | 2023-03-17 | A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the f… |
CVE-2023-27585 | High | 7.5 | 2023-03-14 | PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications… |
CVE-2023-24913 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24907 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24876 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24868 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24867 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23415 | Critical | 9.8 | 2023-03-14 | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
CVE-2023-23406 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23403 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23400 | High | 7.2 | 2023-03-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-1170 | Medium | 6.6 | 2023-03-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. |
CVE-2023-1010 | Medium | 5.3 | 2023-02-24 | A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipula… |
CVE-2023-22236 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-0866 | High | 7.8 | 2023-02-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2023-23782 | High | 7.8 | 2023-02-16 | A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 a… |
CVE-2023-0841 | Medium | 6.3 | 2023-02-15 | A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file… |
CVE-2023-23381 | High | 7.8 | 2023-02-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-23390 | High | 7.8 | 2023-02-14 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-23378 | High | 7.8 | 2023-02-14 | Print 3D Remote Code Execution Vulnerability |
CVE-2023-23377 | High | 7.8 | 2023-02-14 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-23376 | High | 7.8 | 2023-02-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-21812 | High | 7.8 | 2023-02-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-21804 | High | 7.8 | 2023-02-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-21799 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21695 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21694 | Medium | 6.8 | 2023-02-14 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-21692 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21690 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21689 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21528 | High | 7.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-24551 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24550 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-0819 | High | 7.8 | 2023-02-13 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2022-42783 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-34454 | Medium | 6.7 | 2023-02-10 | Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerabili… |
CVE-2023-0760 | High | 7.8 | 2023-02-09 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV. |
CVE-2022-45491 | High | 7.8 | 2023-02-03 | Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows… |
CVE-2022-34400 | High | 7.1 | 2023-02-01 | Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arb… |
CVE-2023-23582 | Medium | 5.3 | 2023-01-30 | Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary c… |
CVE-2022-41991 | Critical | 9.8 | 2023-01-26 | A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted n… |
CVE-2022-1892 | Medium | 6.7 | 2023-01-26 | A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. |
CVE-2022-1891 | Medium | 6.7 | 2023-01-26 | A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. |
CVE-2022-1890 | Medium | 6.7 | 2023-01-26 | A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. |
CVE-2022-42405 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |
CVE-2022-42403 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |
CVE-2023-0433 | High | 7.8 | 2023-01-21 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
CVE-2023-21605 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflo… |
CVE-2023-21594 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… |
CVE-2023-21587 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code ex… |
CVE-2023-0288 | High | 7.8 | 2023-01-13 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. |
CVE-2022-3160 | High | 7.8 | 2023-01-13 | The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacke… |
CVE-2022-43591 | High | 8.8 | 2023-01-12 | A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out-of-bounds… |
CVE-2022-3437 | Medium | 6.5 | 2023-01-12 | A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decr… |