CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- silabs micrium uc-http, silabs.com gecko platform +1 moreHeap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution9.1 Critical
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to...8.8 High
- openbmc project openbmcUnauthenticated out of bounds heap write in bmcweb8.2 High
- samba, fedoraproject fedora +1 moreCVE-2022-3437 affecting package samba 4.12.5-76.5 Medium
- siemens jt2go, teamcenter visualization, teamcenter visualization v13.3 +1 more +3 moreDatalogics APDFL library Heap-based Buffer Overflow7.8 High
- git, apple xcode, debian linux +1 more +3 moreGit vulnerable to Remote Code Execution via Heap overflow in `git shell`8.5 High
- adobe coldfusionAdobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- siemens solid edgeA vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected...7.8 High
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior...8.0 High
- rockwell automation thinmanager thinserver, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack8.1 High
- denx u-boot, uboot, siemens ruggedcom rox mx5000 +10 more +12 moreUnchecked Download size in Uboot7.7 High
- ffmpegHeap-memory write in FFMPEG9.0 Critical
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +3 more +5 moreAn integer overflow in WhatsApp could result in remote code execution in an established video call.9.8 Critical
- adobe bridgeAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.8 High
- adobe indesignAdobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe animateAdobe Animate SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText...4.4 Medium
- openatom openharmonyIPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.6.2 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote...8.8 High
- linux kernelA heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue...6.7 Medium
- hdf5 group libhdf5, hdfgroup hdf5 +1 moreA heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group...7.8 High
- artifex ghostscript, debian linux, red hat enterprise linux 6 +3 more +5 moreGhostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c7.1 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- adobe framemakerAdobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe framemakerAdobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.3 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.8 High
- Show moreLoading…