CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- gonitro nitropdfA specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522...8.8 High
- gonitro nitropdfA specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522...8.8 High
- gonitro nitropdfA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when...8.8 High
- gonitro nitropdfA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when...8.8 High
- delta electronics tpeditorDelta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow...7.8 High
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +36 more +38 moreThere is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell...5.5 Medium
- linux kernel, netapp altavault, baseboard management controller +15 more +17 morekernel is vulnerable to a None7.8 High
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreThere is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the...5.5 Medium
- openweave openweave-coreAn exploitable command execution vulnerability exists in the ASN1 certificate writing...7.5 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the PCX image-rendering functionality of...8.8 High
- delta electronics cncsoft screeneditor, deltaww cnssoft screeneditor +1 moreDelta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer...7.8 High
- facebook hhvm, hiphop virtual machine +1 moreCall to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically...9.8 Critical
- redis, canonical ubuntu linux, debian linux +7 more +9 moreA heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3...7.2 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreA flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies...5.9 Medium
- panasonic fpwin pro, control fpwin pro +1 morePanasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded...7.8 High
- samsung galaxy s9, galaxy s9 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.6 Critical
- linux kernel, canonical ubuntu linux, debian linux +9 more +11 moreA flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in...8.0 High
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +5 more +7 moreA buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via...9.8 Critical
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when...7.8 High
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when...7.8 High
- deltaww cncsoft screeneditor, ics-cert delta industrial automation cncsoft +1 moreDelta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple...7.8 High
- broadcom brcmfmac wifi driver, brcmfmac driver, linux kernel +2 moreBroadcom brcmfmac driver is vulnerable to a heap buffer overflow7.9 High
- honeywell experion pks, experion process knowledge system +1 moreMultiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions...9.8 Critical
- moxa softcmsMoxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow...8.8 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file...9.8 Critical
- rainbowpdf office server document converter, antenna house house +1 moreA heap-based overflow vulnerability exists in the PowerPoint document conversion function of...8.8 High
- ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code...9.8 Critical
- ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results...9.8 Critical
- ics-cert wecon levistudiou, we-con levistudiou +1 moreSeveral heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior...7.8 High
- rockwellautomation factorytalk services platform, rockwell automation factorytalk services platform v2.90 and earlier +1 moreIn Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated...7.5 High
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...9.8 Critical
- facebook hhvmThe function number_format is vulnerable to a heap overflow issue when its second argument (...9.8 Critical
- facebook whatsapp for android, whatsapp for ios, whatsapp for windows phone +1 more +3 moreA heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is...7.5 High
- siemens sinumerik 828d v4.7 firmware, sinumerik 840d sl v4.7 firmware, sinumerik 840d sl v4.8 firmware +1 more +3 moreA vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1),...8.1 High
- mz-automation libiec61850** DISPUTED ** An issue has been found in libIEC61850 v1.3. It is a SEGV in...7.5 High
- debian linux, redhat enterprise linux server, enterprise linux virtualization +2 more +4 moreThe Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer...6.5 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...4.3 Medium
- ge communicator, gigasoft proessentials +1 moreA heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included...7.6 High
- fuji electric alpha5 smart loader, fujielectric alpha5 smart loader firmware +1 moreFuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on...9.8 Critical
- fuji electric v-server, fujielectric v-server firmware +1 moreFuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been...9.8 Critical
- we-con levistudiouWECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow...8.8 High
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreRockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a...7.5 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 High
- Show moreLoading…