Skip to content
OpenAdvisories

Weakness (CWE)

CWE-122: Heap-based Buffer Overflow

Variant Draft

The product writes past the end of a buffer that was allocated on the heap.

How to prevent it (7 mitigations)

  1. Pre-design: Use a language or compiler that performs automatic bounds checking.

  2. Architecture and Design

    Use an abstraction library to abstract away risky APIs. Not a complete solution.

  3. Operation, Build and Compilation

    Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.

    D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.

  4. Operation, Build and Compilation

    Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.

    Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as "rebasing" (for Windows) and "prelinking" (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.

    For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].

  5. Implementation

    Implement and perform bounds checking on input.

  6. Implementation

    Do not use dangerous functions such as gets. Look for their safe equivalent, which checks for the boundary.

  7. Operation

    Use OS-level preventative functionality. This is not a complete solution, but it provides some defense in depth.

Source: MITRE CWE-122

All Critical High Medium Low Exploited only Public exploit

2,892 results · Clear filters · Feed

  • High 8.1
    CVE-2022-27569

    Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 al…

    Samsung Mobile Samsung Mobile Devices
  • High 8.1
    CVE-2022-27568

    Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 al…

    Samsung Mobile Samsung Mobile Devices
  • High 8.1
    CVE-2022-26098

    Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 …

    Samsung Mobile Samsung Mobile Devices
  • High 7.4
    CVE-2022-26092

    Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution.

    Samsung Mobile Samsung Mobile Devices
  • High 7.6
    CVE-2022-1240

    Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2

    Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely…

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.4
    CVE-2022-1253

    Heap-based Buffer Overflow in strukturag/libde265

    Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.

    strukturag strukturag/libde265 libde265 libde265 Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-1244

    heap-buffer-overflow in radareorg/radare2

    heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.3
    CVE-2022-1160

    heap buffer overflow in get_one_sourceline in vim/vim

    heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

    vim vim/vim vim vim Azure Linux Alpine
  • High 7.3
    CVE-2022-1052

    Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2

    Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.3
    CVE-2022-1061

    Heap Buffer Overflow in parseDragons in radareorg/radare2

    Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 8.4
    CVE-2022-0943

    Heap-based Buffer Overflow occurs in vim in vim/vim

    Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2022-24096

    Adobe After Effects Heap-based Buffer Overflow Arbitrary code execution

    Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

    Adobe After Effects
  • High 7.8
    CVE-2022-0676

    Heap-based Buffer Overflow in radareorg/radare2

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 8.4
    CVE-2022-0714 EPSS 13%

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.0
    CVE-2022-24052

    MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2021-46653

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-46648

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46647

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46606

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46605

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46603

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-46577

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

    Bentley MicroStation CONNECT
  • High 7.8
    CVE-2021-21958

    A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.…

  • High 8.4
    CVE-2022-0570

    Heap-based Buffer Overflow in mruby/mruby

    Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

    mruby mruby/mruby mruby Ubuntu
  • High 8.4
    CVE-2022-0572 EPSS 26%

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.2
    CVE-2021-3861

    The RNDIS USB device class includes a buffer overflow vulnerability

    The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj

    zephyrproject-rtos Zephyr zephyr Ubuntu
  • High 8.2
    CVE-2021-3835

    Buffer overflow in usb device class

    Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf

    zephyrproject-rtos Zephyr zephyr Ubuntu
  • High 8.4
    CVE-2022-0417

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.4
    CVE-2022-0361

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2021-23157

    WECON LeviStudioU

    WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

    WECON LeviStudioU
  • High 7.8
    CVE-2021-44708 EPSS 38%

    Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the …

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-44709 EPSS 28%

    Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the …

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-34945

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34938

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34907

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34905

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34904

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34900

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34896

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View
  • High 7.8
    CVE-2021-34893

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

    Bentley View