CWE-122 · Heap-based Buffer Overflow (page 28)
Page 28 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3966 | Critical | 9.6 | 2023-01-11 | usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem. |
CVE-2023-21793 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21792 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21791 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21790 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21787 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21786 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21785 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21783 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21782 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21781 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21780 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21738 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21737 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21733 | High | 7.0 | 2023-01-10 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-21560 | Medium | 6.6 | 2023-01-10 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2023-0051 | High | 7.8 | 2023-01-04 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. |
CVE-2022-44430 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44429 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44428 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44427 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-23547 | Medium | 6.5 | 2022-12-23 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2022-43602 | High | 8.1 | 2022-12-22 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… |
CVE-2022-43601 | High | 8.1 | 2022-12-22 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… |
CVE-2022-43600 | High | 8.1 | 2022-12-22 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… |
CVE-2022-43599 | High | 8.1 | 2022-12-22 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… |
CVE-2022-43598 | High | 8.1 | 2022-12-22 | Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially craf… |
CVE-2022-43597 | High | 8.1 | 2022-12-22 | Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially craf… |
CVE-2022-41838 | Critical | 9.8 | 2022-12-22 | A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead… |
CVE-2022-41794 | Critical | 9.8 | 2022-12-22 | A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to… |
CVE-2022-41639 | Critical | 9.8 | 2022-12-22 | A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-c… |
CVE-2022-23537 | Medium | 6.5 | 2022-12-20 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2022-4584 | Medium | 6.3 | 2022-12-17 | A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the compo… |
CVE-2022-2601 | High | 8.6 | 2022-12-14 | A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, all… |
CVE-2022-44910 | High | 7.8 | 2022-12-14 | Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c. |
CVE-2022-44654 | High | 7.5 | 2022-12-12 | Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection me… |
CVE-2022-2948 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code. |
CVE-2022-3491 | High | 7.8 | 2022-12-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. |
CVE-2022-3520 | Critical | 9.8 | 2022-12-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. |
CVE-2022-4141 | High | 7.8 | 2022-11-25 | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. |
CVE-2022-43171 | Medium | 6.5 | 2022-11-17 | A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (Do… |
CVE-2022-24942 | Critical | 9.1 | 2022-11-15 | Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTTP request. |
CVE-2022-20946 | High | 8.6 | 2022-11-15 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2022-45188 | High | 7.8 | 2022-11-12 | Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on… |
CVE-2022-39136 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization… |
CVE-2022-2809 | High | 8.2 | 2022-10-27 | A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer… |
CVE-2022-2069 | High | 7.8 | 2022-10-20 | The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length… |
CVE-2022-39260 | High | 8.5 | 2022-10-19 | Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull fun… |
CVE-2022-35712 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar… |
CVE-2022-35711 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar… |
CVE-2022-37864 | High | 7.8 | 2022-10-11 | A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length he… |
CVE-2022-39852 | High | 8.0 | 2022-10-07 | A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execu… |
CVE-2022-38742 | High | 8.1 | 2022-09-23 | Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafte… |
CVE-2022-2347 | High | 7.7 | 2022-09-23 | There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does n… |
CVE-2022-2566 | Critical | 9.0 | 2022-09-23 | A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loo… |
CVE-2022-36934 | Critical | 9.8 | 2022-09-22 | An integer overflow in WhatsApp could result in remote code execution in an established video call. |
CVE-2022-35708 | High | 7.8 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary co… |
CVE-2022-35706 | High | 7.8 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary co… |
CVE-2022-3234 | High | 7.8 | 2022-09-17 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. |
CVE-2022-38433 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar… |
CVE-2022-38432 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar… |
CVE-2022-38415 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38414 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38413 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38405 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38404 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38401 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38411 | High | 7.8 | 2022-09-16 | Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-40661 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is… |
CVE-2022-40660 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is… |
CVE-2022-40655 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is… |
CVE-2022-38701 | Medium | 6.2 | 2022-09-09 | OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information. |
CVE-2022-36863 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release… |
CVE-2022-36862 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 al… |
CVE-2022-36860 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows atta… |
CVE-2022-36858 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Relea… |
CVE-2022-36846 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows… |
CVE-2022-36845 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows a… |
CVE-2022-36844 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allo… |
CVE-2022-36843 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows a… |
CVE-2022-36842 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows… |
CVE-2022-36841 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 al… |
CVE-2022-25309 | Medium | 5.5 | 2022-09-06 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c fil… |
CVE-2022-2915 | High | 8.8 | 2022-08-26 | A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the app… |
CVE-2022-2991 | Medium | 6.7 | 2022-08-25 | A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-sup… |
CVE-2022-26061 | High | 7.8 | 2022-08-22 | A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execu… |
CVE-2022-2849 | High | 7.8 | 2022-08-17 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. |
CVE-2022-2819 | High | 7.8 | 2022-08-15 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211. |
CVE-2022-35677 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could res… |
CVE-2022-35676 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could res… |
CVE-2022-2580 | High | 7.8 | 2022-08-01 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. |
CVE-2022-2571 | High | 7.8 | 2022-08-01 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. |
CVE-2022-2522 | High | 7.8 | 2022-07-25 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061. |
CVE-2022-31144 | High | 7.0 | 2022-07-19 | Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflo… |
CVE-2022-2122 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or… |
CVE-2022-1925 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data funct… |
CVE-2022-1924 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a… |
CVE-2022-1923 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes… |
CVE-2022-1922 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function whi… |
CVE-2022-1920 | High | 7.8 | 2022-07-19 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential… |