CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +2 more +4 moreMicrosoft Failover Cluster Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +6 more +8 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft paint 3dPaint 3D Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2013 service pack 1 +5 more +7 moreMicrosoft ActiveX Remote Code Execution Vulnerability7.0 High
- redis, fedoraproject fedora +1 moreHeap overflow in COMMAND GETKEYS and ACL evaluation in Redis7.4 High
- siemens tecnomatix, tecnomatix plant simulation v2201, tecnomatix plant simulation v2302 +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201...7.8 High
- siemens tecnomatix, tecnomatix plant simulation v2201, tecnomatix plant simulation v2302 +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201...7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.c7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.c7.8 High
- huawei emui, harmonyos +1 moreUse After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of...9.8 Critical
- diagonA heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of...7.8 High
- diagonAn access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0...5.3 Medium
- gstreamerGStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamerGStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap-buffer-overflow in coders/tiff.c6.2 Medium
- microsoft ole db driver 18 for sql server, ole db driver 19 for sql server, visual studio 2019 version 16.11 (includes 16.0 - 16.10) +6 more +8 moreMicrosoft SQL OLE DB Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function...5.5 Medium
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac5.1 Medium
- microsoft .net, .net framework, visual studio +22 more +24 more.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability9.8 Critical
- microsoft remote desktop client, remote desktop client for windows desktop, windows 10 version 1507 +25 more +27 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- fortinet fortios, fortiproxy, fortios and fortiproxy ssl-vpn +1 more +3 moreA heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version...9.2 Critical
- emqx nanomqNanoMQ 0.17.5 is vulnerable to heap-buffer-overflow in the conn_handler function of mqtt_parser.c...7.8 High
- delta electronics cncsoft-b dopsoft, deltaww cncsoft-b +1 moreDelta Electronics CNCSoft-B DOPSoft Heap-based buffer overflow7.8 High
- wiresharkWireshark MSMMS parsing buffer overflow6.5 Medium
- wireshark, debian linux +1 moreWireshark RTPS Parsing Buffer Overflow6.5 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer...5.3 Medium
- imagemagickA heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to...5.5 Medium
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- openprinting cups, debian linux +1 moreOpenPrinting CUPS vulnerable to heap buffer overflow7.5 High
- freeswitch sofia-sip, debian linux +1 moreheap-over-flow and integer-overflow in sofia-sip7.5 High
- libjpeg-turboA heap-based buffer overflow issue was discovered in libjpeg-turbo in...6.5 Medium
- facebook netconsdnetconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A...9.8 Critical
- intel soc watch, battery life diagnostic tool, oneapi base toolkit +2 moreHeap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a...7.2 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20361: Adobe Substance 3D Painter USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office...9.8 Critical
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers...9.8 Critical
- microsoft av1 video extensionAV1 Video Extension Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreWindows Bluetooth Driver Elevation of Privilege Vulnerability7.4 High
- Show moreLoading…