CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability9.8 Critical
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based...2.7 Low
- podofoPoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflow5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker...8.8 High
- autodesk fbx sdk, fbx software development kit +1 moreA user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow...7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20318: Adobe Substance 3D Designer DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20315: Adobe Substance 3D Designer USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20236: Adobe Substance 3D Stager USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum()...5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 for mac +3 more +5 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0, visual studio 2022 version 17.2 +4 more +6 moreVisual Studio Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Boot Manager Security Feature Bypass Vulnerability6.2 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows Network Load Balancing Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreDHCP Server Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Bluetooth Driver Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows NTLM Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft SQL Server Remote Code Execution Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- ichitaro, justsystems ichitaro 2022 +1 moreA buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0...7.8 High
- ichitaro, justsystems ichitaro 2022 +1 moreA heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600...7.0 High
- nvidia dcgm, data center gpu manager +1 moreNVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may...8.4 High
- d-link dir-3040, dlink dir-3040 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- kepware kepserverex, ptc kepware kepserverex, ge industrial gateway server +6 more +8 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.1 Critical
- adobe dimensionZDI-CAN-19521: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-19520: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-19540: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-19493: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-19480: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-19386: Adobe Dimension FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-19385: Adobe Dimension OBJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- canon imageclass mf644cdw, 1435i\+ firmware, 1435if\+ firmware +74 more +76 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.8 High
- google tensorflowTensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad7.5 High
- google tensorflowTensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation9.8 Critical
- cisco adaptive security appliance software, ios, ios xe +1 more +3 moreCisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability6.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Privilege Escalation Vulnerability4.4 Medium
- syoyo tinydngsyoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow3.3 Low
- gpacGPAC mpegts.c gf_m2ts_process_sdt heap-based overflow5.3 Medium
- Show moreLoading…