Heap-based Buffer Overflow — CVEs by weakness type

Fast Dds HIGH 7.5

CVE-2024-30259

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.…

Fix: 2.6.8 / 2.10.4+

Fix from $1,950 2024-05-14

Hdf5 HIGH 7.4

CVE-2024-29165

HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial o…

Fix: 1.14.4+

Fix from $1,950 2024-05-14

Hdf5 HIGH 7.4

CVE-2024-29160

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in the corruption of the instruction pointer and causi…

Fix: 1.14.4+

Fix from $1,950 2024-05-14

Hdf5 HIGH 8.8

CVE-2024-29161

HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing de…

Fix: 1.14.4+

Fix from $1,950 2024-05-14

Hdf5 HIGH 7.4

CVE-2024-29162

HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in denial of service or potential code execution.

Fix: after 1.14.3

Fix from $1,950 2024-05-14

Hdf5 HIGH 7.4

CVE-2024-29163

HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption of the instruction pointer and causing denial of se…

Fix: 1.14.4+

Fix from $1,950 2024-05-14

Hdf5 CRITICAL 9.8

CVE-2024-29157

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial of servic…

Fix: after 1.14.3

Fix from $2,300 2024-05-14

Hdf5 HIGH 7.4

CVE-2024-29158

HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of…

Fix: after 1.14.3

Fix from $1,950 2024-05-14

View HIGH 7.8

CVE-2022-43655

Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a…

Mitigation only

Fix from $1,950 2024-05-07

Pdf Editor HIGH 7.8

CVE-2021-34971

Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e…

Fix: after 11.0.1.49938

Fix from $1,950 2024-05-07

Chrome MEDIUM 6.5

CVE-2024-4559

Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a craf…

Fix: 124.0.6367.155+

Fix from $1,600 2024-05-07

Suricata HIGH 7.3

CVE-2024-32664

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, spec…

Fix: 6.0.19 / 7.0.5+

Fix from $1,950 2024-05-07

Openharmony HIGH 7.8

CVE-2024-3758

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.

Fix: 4.0.1+

Fix from $1,950 2024-05-07

Webassembly Micro Runtime MEDIUM 6.2

CVE-2024-34250

A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a…

No fix yet

Fix from $1,600 2024-05-06

Wasm3 CRITICAL 9.8

CVE-2024-34249

wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_…

No fix yet

Fix from $2,300 2024-05-06

Libpag MEDIUM 5.3

CVE-2024-34408

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable A…

Fix: after 4.3.51

Fix from $1,600 2024-05-03

Bluez HIGH 7.1

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers …

Mitigation only