Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially ex
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a netw
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent netwo
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a net
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a
Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges lo
Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute
OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData(
ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allo
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within t
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command ha
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allo
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decod
FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and A
Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary co
Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bo
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execut
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to ex
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute co
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent netwo
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as t
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrar
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code ou
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or ma
Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code in
Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbi
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code ins
mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a
MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 befo
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland b
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers auth
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeSc
Frequently Asked Questions
What is CWE-122?
CWE-122 (CWE-122) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-122?
There are 2,806 CVE records associated with CWE-122 in our database. Of these, 257 are critical severity, 1911 are high severity, and 479 are medium severity.
How can I protect against CWE-122 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-122 using AI-powered security agents.
Detect CWE-122 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-122 vulnerabilities across your infrastructure.
Get Started