CWE-122 · Heap-based Buffer Overflow (page 29)
Page 29 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-34250 | High | 7.8 | 2022-07-15 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod… |
CVE-2022-34249 | High | 7.8 | 2022-07-15 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod… |
CVE-2022-34246 | High | 7.8 | 2022-07-15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-34245 | High | 7.8 | 2022-07-15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-34241 | High | 7.8 | 2022-07-15 | Adobe Character Animator version 4.4.7 (and earlier) and 22.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arb… |
CVE-2022-34819 | Critical | 10.0 | 2022-07-12 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All… |
CVE-2022-2344 | High | 7.8 | 2022-07-08 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. |
CVE-2022-2343 | High | 7.8 | 2022-07-08 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. |
CVE-2022-2284 | High | 7.8 | 2022-07-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
CVE-2022-2264 | High | 7.8 | 2022-07-01 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
CVE-2022-2207 | High | 7.8 | 2022-06-27 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-32137 | High | 8.8 | 2022-06-24 | In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-serv… |
CVE-2022-2182 | High | 7.8 | 2022-06-23 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2021-45918 | High | 7.5 | 2022-06-20 | NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remo… |
CVE-2022-2125 | High | 7.8 | 2022-06-19 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-30654 | High | 7.8 | 2022-06-16 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod… |
CVE-2022-30650 | High | 7.8 | 2022-06-16 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod… |
CVE-2022-30661 | High | 7.8 | 2022-06-16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-30658 | High | 7.8 | 2022-06-16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-2061 | Low | 3.3 | 2022-06-13 | Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. |
CVE-2022-30540 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code |
CVE-2022-31003 | Critical | 9.1 | 2022-05-31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = rec… |
CVE-2022-1942 | High | 7.8 | 2022-05-31 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1886 | High | 7.8 | 2022-05-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-29210 | Medium | 5.5 | 2022-05-21 | TensorFlow is an open source platform for machine learning. In version 2.8.0, the `TensorKey` hash function used total estimated `AllocatedBytes()`, which (a)… |
CVE-2022-1733 | High | 7.8 | 2022-05-17 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968. |
CVE-2022-28234 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vu… |
CVE-2022-1621 | High | 7.8 | 2022-05-10 | Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protec… |
CVE-2022-1619 | High | 7.8 | 2022-05-08 | Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing softwar… |
CVE-2021-38439 | High | 8.6 | 2022-05-05 | All versions of GurumDDS are vulnerable to heap-based buffer overflow, which may cause a denial-of-service condition or remotely execute arbitrary code. |
CVE-2022-20737 | High | 8.5 | 2022-05-03 | A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of Cisco Adaptive Security Appliance (ASA)… |
CVE-2022-1437 | High | 7.1 | 2022-04-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-1383 | Medium | 6.1 | 2022-04-18 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-1381 | High | 7.8 | 2022-04-18 | global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection… |
CVE-2021-40426 | High | 8.8 | 2022-04-14 | A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A spec… |
CVE-2021-21948 | High | 7.8 | 2022-04-14 | A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file c… |
CVE-2021-21947 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-cra… |
CVE-2021-21946 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-cra… |
CVE-2021-21945 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap… |
CVE-2021-21944 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap… |
CVE-2021-21943 | High | 8.8 | 2022-04-14 | A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execut… |
CVE-2021-21942 | High | 8.8 | 2022-04-14 | An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to remo… |
CVE-2021-21914 | High | 8.8 | 2022-04-14 | A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to… |
CVE-2022-22188 | High | 7.5 | 2022-04-14 | An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allo… |
CVE-2022-21214 | High | 7.8 | 2022-04-12 | The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution. |
CVE-2022-27572 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers. |
CVE-2022-27571 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote… |
CVE-2022-27570 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote att… |
CVE-2022-27569 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. |
CVE-2022-27568 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. |
CVE-2022-26098 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker… |
CVE-2022-26092 | High | 7.4 | 2022-04-11 | Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution. |
CVE-2022-1286 | Critical | 9.8 | 2022-04-10 | heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. |
CVE-2022-1253 | Critical | 9.8 | 2022-04-06 | Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd092… |
CVE-2022-1240 | High | 7.8 | 2022-04-06 | Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compil… |
CVE-2022-1244 | Medium | 5.5 | 2022-04-05 | heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. |
CVE-2022-24795 | Medium | 5.9 | 2022-04-05 | yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads t… |
CVE-2022-1160 | High | 7.8 | 2022-03-30 | heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647. |
CVE-2022-1052 | Medium | 5.5 | 2022-03-24 | Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6. |
CVE-2022-1061 | High | 7.5 | 2022-03-24 | Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8. |
CVE-2021-23165 | Critical | 9.8 | 2022-03-16 | A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of se… |
CVE-2021-43305 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-43304 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2022-0943 | High | 7.8 | 2022-03-14 | Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. |
CVE-2022-24096 | High | 7.8 | 2022-03-11 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbit… |
CVE-2021-42018 | Medium | 5.9 | 2022-03-08 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RU… |
CVE-2022-0714 | Medium | 5.5 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. |
CVE-2022-0713 | High | 7.1 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0676 | High | 7.8 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-24052 | High | 7.8 | 2022-02-18 | MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2021-46653 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-46648 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46647 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46606 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46605 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46603 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46577 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2022-0631 | Critical | 9.8 | 2022-02-18 | Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. |
CVE-2021-21958 | High | 7.8 | 2022-02-16 | A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file… |
CVE-2022-0572 | High | 7.8 | 2022-02-14 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0570 | Critical | 9.8 | 2022-02-14 | Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. |
CVE-2021-44000 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022… |
CVE-2022-0518 | High | 7.1 | 2022-02-08 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2021-3861 | High | 8.2 | 2022-02-07 | The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more informati… |
CVE-2021-3835 | High | 8.2 | 2022-02-07 | Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephy… |
CVE-2021-21962 | High | 8.1 | 2022-02-04 | A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A series of spe… |
CVE-2022-0417 | High | 7.8 | 2022-02-01 | Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. |
CVE-2022-0407 | High | 7.8 | 2022-01-30 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0392 | High | 7.8 | 2022-01-28 | Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. |
CVE-2022-0361 | High | 7.8 | 2022-01-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0359 | High | 7.8 | 2022-01-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0318 | Critical | 9.8 | 2022-01-21 | Heap-based Buffer Overflow in vim/vim prior to 8.2. |
CVE-2022-0261 | High | 7.8 | 2022-01-18 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2021-44709 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability d… |
CVE-2021-44708 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability d… |
CVE-2021-23157 | High | 7.8 | 2022-01-14 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2022-0213 | Medium | 6.6 | 2022-01-14 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-34945 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34938 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34907 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |