CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- adobe indesignAdobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.3 High
- qtA buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A...8.8 High
- linux kernelA bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS...7.5 High
- zephyrproject zephyrUsb bluetooth device ACL read cb buffer overflow9.6 Critical
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft office, visio, 365 apps +6 more +8 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 20h2, windows 10 version 21h2, windows 10 version 22h2 +8 more +10 moreWindows Bind Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Boot Manager Security Feature Bypass Vulnerability6.6 Medium
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.3 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- pjsip pjproject, pjsip +1 moreHeap buffer overflow in pjproject when decoding STUN message6.5 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality...8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality...8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreA code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO...9.8 Critical
- academysoftwarefoundation openimageio, debian linux +1 moreA heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of...9.8 Critical
- academysoftwarefoundation openimageio, debian linux +1 moreA heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in...9.8 Critical
- teluu pjsip, debian linux, pjsip pjproject +2 morePJSIP vulnerable to heap buffer overflow when decoding STUN message6.5 Medium
- axiomatic bento4Axiomatic Bento4 mp42aac heap-based overflow6.3 Medium
- quarkslab binbloomBinbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at ...7.8 High
- ge cimplicityGE CIMPLICITY Heap-based Buffer Overflow7.8 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim4.0 Medium
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to...8.8 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.3 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAffected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine...7.5 High
- lief-project liefLIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind6.5 Medium
- fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 moreA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...8.6 High
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...7.8 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco...8.6 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- netwrix auditorRemote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording...9.8 Critical
- Show moreLoading…