pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/conf.c allocates
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of
In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation o
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists
Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compou
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a phys
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.
A heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS
Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: befor
An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution S
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cau
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a size_t underflow in the IMA-ADPCM an
A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C520WS v2.6 in the HTTP POST bod
A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when
A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of
xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its log
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, trig
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted
Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sen
Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a us
A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the oc_superior
An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allo
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allow
A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and abov
A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function js_typed_array_sort o
A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_
A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/to_lab/fsw
A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::dele
A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data
A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compre
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter:
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a
Frequently Asked Questions
What is CWE-122?
CWE-122 (CWE-122) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-122?
There are 2,806 CVE records associated with CWE-122 in our database. Of these, 257 are critical severity, 1911 are high severity, and 479 are medium severity.
How can I protect against CWE-122 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-122 using AI-powered security agents.
Detect CWE-122 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-122 vulnerabilities across your infrastructure.
Get Started