CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- red hat spice-client, spice project spice +1 moreMultiple integer overflow and buffer overflow issues were discovered in spice-client's handling...7.6 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- acd systems canvas drawAn exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0...8.8 High
- acd systems canvas drawAn exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0...8.8 High
- linux kernel, canonical ubuntu linux, kernel heap-based buffer overflow in fs/ext4/xattr.c +1 more +3 moreLinux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c...5.2 Medium
- delta electronics industrial automation dopsoft, deltaww delta industrial automation dopsoft +1 moreDelta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed...9.8 Critical
- siemens rfid 181eip, ruggedcom win, scalance x-200 switch family (incl. siplus net variants) +15 more +17 moreA vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5...8.8 High
- delta electronics automation tpeditor, deltaww tpeditor +1 moreIn Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file...9.8 Critical
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...7.3 High
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +1 more +3 moreprocps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer...3.9 Low
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file...2.8 Low
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...7.5 High
- deltaww wplsoft, ics-cert delta electronics wplsoft +1 moreWPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where...8.8 High
- advantech webaccess hmi designer, ics-cert advantech webaccess hmi designer +1 moreHeap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior...7.8 High
- ics-cert omron cx-one, omron cx-flnet, cx-one +5 more +7 moreParsing malformed project files in Omron CX-One versions 4.42 and prior, including the following...7.8 High
- mitsubishi electric europe b.v. e-designerMitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited...9.8 Critical
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap...5.3 Medium
- joyent smartos, oracle solaris, zfs storage appliance +2 moreThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.0 High
- advancemame advancecomp, amadvance advancecomp:, canonical ubuntu linux +1 more +3 moreAn out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02...3.3 Low
- we-con levistudio hmi editor firmwareAn issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially...7.8 High
- we-con levi studio hmiA Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer...8.6 High
- gnu wget, debian linux +1 moreGNU Wget: heap overflow in HTTP protocol handling8.8 High
- advantech webaccessA heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8...8.8 High
- augeasAugeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to...9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds read in nokogiri7.5 High
- we-con levi studio hmi editorA Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor...8.8 High
- fedoraproject 389 directory server, unspecified 389-ds-base, redhat enterprise linux +2 more389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the...3.7 Low
- libtiffLibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in...9.8 Critical
- qemu, citrix xenserver, debian linux +7 more +9 moreA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display...5.5 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...7.5 High
- uclouvain openjpeg, the openjpeg project openjpeg2 +1 moreAn infinite loop vulnerability in tiftoimage that results in heap buffer overflow in...3.3 Low
- uclouvain openjpeg, the openjpeg project openjpeg2 +1 moreAn integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting...3.3 Low
- curlcurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 Medium
- [unknown] sambaA flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains...8.1 High
- jasper project jasper, debian linux, redhat enterprise linux desktop +4 more +6 moreA heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being...7.8 High
- curl, haxx libcurl +1 moreThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 Low
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 High
- libpng, apple mac os x +1 moreHeap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x...10.0 High
- adobe flash player, hp insight orchestration, system management homepage +12 more +14 moreHeap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before...9.8 Critical
- libpngMultiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial...5.0 Medium
- libpngInteger overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5...5.0 Medium
- schneider electric opc factory server (ofs), schneider-electric opc factory server tlxcdlfofs, opc factory server tlxcdltofs +3 more +5 moreSchneider Electric OPC Factory Server Buffer Overflow5.0
- yokogawa centum cs 3000Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow9.3
- videolan vlc media player** DISPUTED ** plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly...6.8 Medium
- Show moreLoading…