CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- imgproxy imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow 9.3 Critical
- tenda ac19 Tenda AC19 saveParentControlInfo heap-based overflow 10.0 Critical
- sonicwall sonicos A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS... 5.9 Medium
- sonicwall sonicos A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS... 7.5 High
- amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 more Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser 9.3 Critical
- signalwire freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding 8.2 High
- signalwire freeswitch FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling 9.1 Critical
- accel-ppp accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql 8.3 High
- bytecodealliance wasm-micro-runtime WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer 8.3 High
- thalesgroup safenet authentication client service Local privilege escalation in SafeNet Authentication Client SACSrv 7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch 8.1 High
- wazuh Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML 5.3 Medium
- resiprocate reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket 8.2 High
- ibm mq IBM MQ is affected by a denial of service vulnerability 5.4 Medium
- munt libmt32emu libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex 8.5 High
- apache openoffice Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption 5.8 Medium
- freerdp FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment 8.7 High
- freerdp FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys 8.7 High
- freerdp FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap 7.1 High
- nomachine NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability 9.8 Critical
- tanium deploy Tanium addressed a heap-based buffer overflow vulnerability in Deploy. 7.2 High
- irfanview IrfanView TIFF Wang Annotation heap-based overflow 2.3 Low
- google chrome Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 9.6 Critical
- google chrome Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote... 9.6 Critical
- google chrome Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 9.6 Critical
- solanum-ircd solanum Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN 8.5 High
- nvidia slurm NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket... 7.0 High
- nvidia slurm NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process... 6.3 Medium
- netpbm Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer Overflow 8.5 High
- google android In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap... 8.4 High
- google android In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer... 5.3 Medium
- google android In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a... 8.4 High
- strukturag libheif libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder 7.7 High
- opengear acm7000, cm7100, im7200 +2 more Pre-Auth Heap Buffer Overflow in the Multipart Request 8.4 High
-
github.com/imgproxy/imgproxyGo,github.com/imgproxy/imgproxy/v2Go,github.com/imgproxy/imgproxy/v3Go +1 more +3 more imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution 9.8 Critical - red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation 6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback 5.8 Medium
- google chrome Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote... 9.6 Critical
- vtk A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets... 7.5 High
- imagemagick ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option 4.8 Medium
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 8.8 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 8.8 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 8.8 High
- alpine ilx-f511 Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability 6.8 Medium
- n-romanovich usb-test USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS 7.0 High
- simulationcraft simc SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array 7.5 High
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 4.9 Medium
- Show olderLoading…