Heap-based Buffer Overflow — CVEs by weakness type

Wattbox Wb 300 Ip 3 Firmware CRITICAL 9.8

CVE-2023-23582

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute ar…

Mitigation only

Fix from $2,300 2023-01-30

Quartz Gold Firmware CRITICAL 9.8

CVE-2022-41991

A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially…

No fix yet

Fix from $2,300 2023-01-26

Thinkbook 14 Iml Firmware HIGH 7.8

CVE-2022-1891

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrar…

Mitigation only

Fix from $1,950 2023-01-26

100e 2nd Gen Firmware HIGH 7.8

CVE-2022-1892

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrar…

Mitigation only

Fix from $1,950 2023-01-26

Thinkbook 14 Iml Firmware HIGH 7.8

CVE-2022-1890

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Mitigation only

Fix from $1,950 2023-01-26

Pdf Xchange Editor HIGH 7.8

CVE-2022-42403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to…

Fix: 9.5.366.0+

Fix from $1,950 2023-01-26

Pdf Xchange Editor HIGH 7.8

CVE-2022-42405

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to…

Fix: 9.5.366.0+

Fix from $1,950 2023-01-26

Vim HIGH 7.8

CVE-2023-0433

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

Fix: 9.0.1225+

Fix from $1,950 2023-01-21

Acrobat Dc HIGH 7.8

CVE-2023-21605

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buff…

Fix: after 22.003.20282

Fix from $1,950 2023-01-18

Incopy HIGH 7.8

CVE-2023-21594

Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar…

Fix: after 17.4

Fix from $1,950 2023-01-13

Indesign HIGH 7.8

CVE-2023-21587

Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitra…

Fix: after 17.4

Fix from $1,950 2023-01-13

Vim HIGH 7.8

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

Fix: 9.0.1189+

Fix from $1,950 2023-01-13

Jt2go HIGH 7.8

CVE-2022-3160

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow a…

Fix: 13.3.0.8 / 14.0.0.4+

Fix from $1,950 2023-01-13

Qt HIGH 8.8

CVE-2022-43591

A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out…

No fix yet

Fix from $1,950 2023-01-12

Fedora MEDIUM 6.5

CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Tripl…

Fix: 4.15.11 / 4.16.6+

Fix from $1,600 2023-01-12

Zephyr HIGH 8.8

CVE-2021-3966

usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.

Fix: 3.0.0+

Fix from $1,950 2023-01-11

3d Builder HIGH 7.8

CVE-2023-21785

3D Builder Remote Code Execution Vulnerability

Fix: 20.0.1+