Heap-based Buffer Overflow — CVEs by weakness type

Openbmc HIGH 7.5

CVE-2022-2809

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address …

Fix: after 2.13.0

Fix from $1,950 2022-10-27

Jt2go HIGH 7.8

CVE-2022-2069

The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fi…

Fix: 13.3.0.5 / 14.0.0.2+

Fix from $1,950 2022-10-20

Git HIGH 8.8

CVE-2022-39260

Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's pus…

Fix: 2.30.6 / 2.31.5+

Fix from $1,950 2022-10-19

Coldfusion CRITICAL 9.8

CVE-2022-35711EPSS 73%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could re…

Patch available

Fix from $2,300 2022-10-14

Coldfusion CRITICAL 9.8

CVE-2022-35712EPSS 37%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could re…

Patch available

Fix from $2,300 2022-10-14

Solid Edge HIGH 7.8

CVE-2022-37864

A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed…

Patch available

Fix from $1,950 2022-10-11

Android HIGH 7.8

CVE-2022-39852

A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform …

Mitigation only

Fix from $1,950 2022-10-07

Thinmanager CRITICAL 9.8

CVE-2022-38742EPSS 22%

Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifica…

Fix: after 13.0.0

Fix from $2,300 2022-09-23

U Boot HIGH 7.1

CVE-2022-2347

There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and…

Fix: after 2022.07

Fix from $1,950 2022-09-23

Ffmpeg HIGH 7.8

CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries …

Patch available

Fix from $1,950 2022-09-23

Whatsapp CRITICAL 9.8

CVE-2022-36934

An integer overflow in WhatsApp could result in remote code execution in an established video call.

Fix: 2.22.16.12+

Fix from $2,300 2022-09-22

Bridge HIGH 7.8

CVE-2022-35708

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar…

Fix: 11.1.4 / 12.0.3+

Fix from $1,950 2022-09-19

Bridge HIGH 7.8

CVE-2022-35706

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar…

Fix: 11.1.4 / 12.0.3+

Fix from $1,950 2022-09-19

Fedora HIGH 7.8

CVE-2022-3234

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.

Fix: 9.0.0483+

Fix from $1,950 2022-09-17

Photoshop HIGH 7.8

CVE-2022-38432

Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result i…

Fix: after 23.4.2