CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- dell poweredge bios intel 15g, poweredge mx740c firmware, poweredge mx840c firmware +7 more +9 moreDell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS...6.1 Medium
- dell poweredge bios intel 15g, poweredge mx740c firmware, poweredge mx840c firmware +7 more +9 moreDell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920...6.1 Medium
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality...9.8 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior...9.0 Critical
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflow9.8 Critical
- htmldoc project htmldocA flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- zephyrproject zephyrMalformed SPI in response for eswifi can corrupt kernel memory7.0 High
- zephyrproject zephyrImproper Input Frame Validation in ieee802154 Processing8.3 High
- netatalk, synology diskstation manager, debian linux +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- exiv2, fedoraproject fedora +1 moreHeap buffer overflow in Exiv2::Jp2Image::encodeJp2Header3.3 Low
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- siemens scalance x200-4p irt, scalance x201-3p irt, scalance x201-3p irt pro +55 more +57 moreA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201...9.8 Critical
- exiv2, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Exiv2::Jp2Image::doWriteMetadata7.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed...8.8 High
- netgear r7800, br200 firmware, br500 firmware +41 more +43 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021...9.0 Critical
- imagemagickA heap based buffer overflow in coders/tiff.c may result in program crash and denial of service...5.5 Medium
- esri arcgis desktop, arcgis engine, arcgis pro +3 more +5 moreArcGIS general raster security update: buffer overflow7.8 High
- hmtalk daviewindyDaviewIndy Heap Overflow Vulnerabilities7.8 High
- tianocore edk ii, edk2 +1 moreA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.6.7 Medium
- adobe animateAdobe Animate heap-based overflow vulnerability7.8 High
- facebook hhvmDue to incorrect string size calculations inside the preg_quote function, a large input string...9.8 Critical
- facebook hhvmxbuf_format_converter, used as part of exif_read_data, was appending a terminating null character...9.8 Critical
- facebook hhvmAn incorrect size calculation in ldap_escape may lead to an integer overflow when overly long...9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- mitsubishi electric corporation cpu module logging configuration tool, cw configurator, data transfer +47 more +49 moreHeap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (C...7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 moreAcrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution8.8 High
- prusa3d prusaslicerAn out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa...8.8 High
- accusoft imagegearA heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in...9.8 Critical
- softmaker planmaker 2021In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted...8.8 High
- softmaker planmaker 2021In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted...8.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...8.8 High
- softmaker planmaker 2021A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of...8.8 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- fujielectric v-server, v-simulator +1 moreA heap-based buffer overflow issue has been identified in the way the application processes...7.8 High
- honeywell opc ua tunnellerThe affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker...9.8 Critical
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...7.8 High
- Show moreLoading…