CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreInternet Control Message Protocol (ICMP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +5 more +7 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- teluu pjsip, pjsip pjproject +1 moreasterisk - security update7.5 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.3 High
- vox2png project vox2pngvox2png vox2png.c heap-based overflow5.3 Medium
- adobe animateAdobe Animate Heap-based Buffer Overflow Arbitrary code execution7.8 High
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6...7.1 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.8 High
- gpacGPAC reframe_mp3.c mp3_dmx_process heap-based overflow6.3 Medium
- microsoft visual studio 2013 update 5, visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +7 more +9 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Fax Service Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft print 3dPrint 3D Remote Code Execution Vulnerability7.8 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft SQL Server Remote Code Execution Vulnerability7.8 High
- siemens solid edge se2022, solid edge se2023 +1 moreA vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...7.8 High
- siemens solid edge se2022, solid edge se2023 +1 moreA vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...7.8 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.8 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local...6.7 Medium
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.3 High
- netatalkThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- json.h project json.hCVE-2022-45491 affecting package suitesparse 7.11.0-17.8 High
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, alienware m15 ryzen edition r5 firmware +81 more +83 moreDell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges...7.1 High
- snap one wattbox wb-300-ip-3, snapav wattbox wb-300-ip-3 firmware +1 moreSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer...5.3 Medium
- siretta quartz-gold, quartz-gold firmware +1 moreA heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of...9.8 Critical
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- lenovo 100e 2nd gen firmware, 100w gen 3 firmware, 13w yoga firmware +68 more +70 moreA buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow...6.7 Medium
- lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow...6.7 Medium
- lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an...6.7 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +2 more +4 moreThe APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while...7.8 High
- adobe incopyAdobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- Show moreLoading…