CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- axis os, os 2016, os 2018 +1 more +3 moreUser controlled parameters related to SMTP notifications are not correctly validated. This can...6.8 Medium
- zephyrproject zephyrBuffer overflow in Zephyr USB DFU DNLOAD9.6 Critical
- redis, debian linux, fedoraproject fedora +3 more +5 moreLua scripts can overflow the heap-based Lua stack in Redis7.5 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +3 more +5 moreAdobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution7.8 High
- adobe svg-native-viewer, svg native viewer +1 moresvg-native-viewer Heap Buffer overflow Vulnerability7.8 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Buffer Overflow8.1 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability10.0 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 moreOut of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to...8.8 High
- delta electronics dopsoft 2, deltaww dopsoft +1 moreDelta Electronics DOPSoft 2 Heap-based Buffer Overflow7.8 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021...6.5 Medium
- bandisoft ark, ark library +1 morebandisoft ARK library heap overflow vulnerability8.6 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vim8.6 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution8.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution8.8 High
- adobe bridgeAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Heap-Based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution5.5 Medium
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Heap-based Buffer Overflow in the PSD_MetaHandler::CacheFileData Could Lead To Application Denial Of Service3.3 Low
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- deltaww tpeditorA heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited...7.8 High
- adobe animateAdobe Animate heap corruption vulnerability could lead to arbitrary code execution7.8 High
- adobe animateAdobe Animate heap corruption vulnerability could lead to arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects heap corruption vulnerability could lead to arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects heap corruption vulnerability could lead to arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects heap corruption vulnerability could lead to arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects heap corruption vulnerability could lead to arbitrary code execution7.8 High
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- att xmillA heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor:...8.1 High
- att xmillA memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T...8.1 High
- realtek ap-router sdk, rtl819x jungle software development kit +1 moreRealtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management...9.8 Critical
- att xmillA heap-based buffer overflow vulnerability exists in the XML Decompression...8.1 High
- att xmillA heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load...8.1 High
- codesys control, control rte, control runtime system toolkit +4 more +6 moreCODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.9.8 Critical
- facebook folly, hhvm +1 morePassing an attacker controlled size when creating an IOBuf could cause integer overflow, leading...9.8 Critical
- google chrome, chromium v8 +1 moreType Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to...8.8 High
- siemens jt2go, solid edge se2021, solid edge +1 more +3 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All...7.8 High
- siemens jt2go, solid edge se2021, solid edge +1 more +3 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All...7.8 High
- siemens jt2go, solid edge se2021, solid edge +1 more +3 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All...7.8 High
- siemens jt2go, solid edge se2021, solid edge +1 more +3 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...7.8 High
- prusa3d prusaslicerAn out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions()...8.8 High
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreParsing a maliciously crafted project file may cause a heap-based buffer overflow, which may...7.8 High
- dell biosconnect, alienware m15 r6 firmware, chengming 3990 firmware +126 more +128 moreDell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious...7.2 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- Show moreLoading…