Weakness (CWE)

CWE-122: Heap-based Buffer Overflow

Variant Draft

The product writes past the end of a buffer that was allocated on the heap.

How to prevent it (7 mitigations)

Pre-design: Use a language or compiler that performs automatic bounds checking.
Architecture and Design

Use an abstraction library to abstract away risky APIs. Not a complete solution.
Operation, Build and Compilation

Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.
D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.
Operation, Build and Compilation

Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.
Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as "rebasing" (for Windows) and "prelinking" (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.
For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].
Implementation

Implement and perform bounds checking on input.
Implementation

Do not use dangerous functions such as gets. Look for their safe equivalent, which checks for the boundary.
Operation

Use OS-level preventative functionality. This is not a complete solution, but it provides some defense in depth.

Source: MITRE CWE-122

All Critical High Medium Low Exploited only Public exploit

4,090 results · Feed

High 7.8

CVE-2021-44708 EPSS 38%

Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the …

Adobe Acrobat Reader

Jan 14, 2022
High 7.8

CVE-2021-44709 EPSS 28%

Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the …

Adobe Acrobat Reader

Jan 14, 2022
Medium 6.8

CVE-2022-0213

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Jan 14, 2022
High 7.8

CVE-2021-34945

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34938

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34905

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34904

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34900

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34896

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34893

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
High 7.8

CVE-2021-34871

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

Bentley View

Jan 13, 2022
Medium 6.8

CVE-2022-0158

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Jan 10, 2022
Critical 9.8

CVE-2021-24042

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp…

Facebook WhatsApp for Android WhatsApp Business for Android WhatsApp for iOS Android iOS

Jan 4, 2022
High 8.2

CVE-2022-0080

Heap-based Buffer Overflow in mruby/mruby

mruby is vulnerable to Heap-based Buffer Overflow

mruby mruby/mruby mruby mruby Debian Ubuntu Alpine

Jan 2, 2022
Low 3.9

CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_d…

ghostscript ghostscript Debian Ubuntu

Dec 31, 2021
High 7.8

CVE-2021-38415

Fuji Electric Tellus Lite V-Simulator heap based buffer overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.

Fuji Electric Tellus Lite V-Simulator V-Server Lite

Dec 20, 2021
High 7.3

CVE-2021-4136

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Azure Linux Alpine

Dec 19, 2021
Unscored —

CVE-2021-44445

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44442

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-20043 EPSS 23%

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attack…

SonicWall SonicWall SMA100 Network devices

Dec 8, 2021
Unscored —

CVE-2021-24041

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Androi…

Facebook WhatsApp for Android WhatsApp Business for Android Android

Dec 7, 2021
High 7.1

CVE-2021-4019

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Dec 1, 2021
High 7.3

CVE-2021-3984

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Dec 1, 2021
High 8.0

CVE-2021-3968

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Azure Linux Alpine

Nov 19, 2021
High 7.3

CVE-2021-3973

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Nov 19, 2021
Unscored —

CVE-2021-26330

AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.

AMD 3rd Gen AMD EPYC™ 2nd Gen AMD EPYC™ 1st Gen AMD EPYC™

Nov 16, 2021
Medium 5.9

CVE-2021-41253

Possible heap buffer overflow when using zycore string functions in formatter hooks

Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffe…

zyantific zydis zydis Debian

Nov 8, 2021
High 7.3

CVE-2021-3927

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Nov 5, 2021
Medium 4.5

CVE-2021-22564

Out of bounds Copy in Libjxl in large image groups

For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. T…

Google libjxl

Nov 1, 2021
Medium 6.2

CVE-2021-3756

Heap-based Buffer Overflow in hoene/libmysofa

libmysofa is vulnerable to Heap-based Buffer Overflow

hoene hoene/libmysofa libmysofa libmysofa Debian Ubuntu

Oct 29, 2021
High 7.3

CVE-2021-3903

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Oct 27, 2021
High 7.5

CVE-2021-34583

CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

CODESYS CODESYS V2 ICS / OT

Oct 26, 2021
High 7.8

CVE-2021-3872

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu

Oct 19, 2021
Critical 9.8

CVE-2021-33023

Advantech WebAccess

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

Advantech WebAccess

Oct 18, 2021
High 7.8

CVE-2021-3875

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Oct 15, 2021
Critical 10.0

CVE-2021-21940

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase…

Oct 12, 2021
Unscored —

CVE-2021-37199

A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected d…

Siemens SINUMERIK 828D SINUMERIK 808D ICS / OT

Oct 12, 2021
High 7.3

CVE-2021-25495

A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3…

Samsung Mobile Samsung Notes

Oct 6, 2021
High 7.2

CVE-2021-25479

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitra…

Samsung Mobile Samsung Mobile Devices

Oct 6, 2021