CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution7.5 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflow7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim4.0 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem7.1 High
- openprinting cups, libppd, debian linux +1 more +3 moreOpenPrinting CUPS/libppd Postscript Parsing Heap Overflow7.0 High
- dell emc xc core xc450 firmware, emc xc core xc650 firmware, emc xc core xc6520 firmware +50 more +52 moreDell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local...5.0 Medium
- microsoft 3d viewer3D Viewer Remote Code Execution Vulnerability7.8 High
- microsoft 3d viewer3D Viewer Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft 3d builder3D Builder Remote Code Execution Vulnerability7.8 High
- microsoft .net, .net 6.0, .net 7.0 +23 more +25 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreWindows Miracast Wireless Display Remote Code Execution Vulnerability8.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +7 more +9 moreA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +7 more +9 moreA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization...7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac5.9 Medium
- zbar project zbarHeap-based buffer overflow in ZBar9.8 Critical
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining5.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare27.3 High
- eprosima fast-dds, fast dds, debian linux +2 moreAnother heap overflow in push_back_helper8.2 High
- eprosima fast-dds, fast dds, debian linux +2 moreHeap overflow in push_back_helper due to a CDR message8.2 High
- samsung android, samsung mobile devices +1 moreAn improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023...4.4 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1...4.4 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation vulnerability within initialize function in HAL VaultKeeper prior to...4.4 Medium
- adobe dimensionZDI-CAN-21093: Adobe Dimension GLB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- automattic mongooseCesanta Mongoose MQTT Message Parsing Heap Overflow8.8 High
- zoom, zoom communications inc. clients, zoom rooms +1 more +3 moreBuffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a...5.9 Medium
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +1 more +3 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, excel 2013 service pack 1 +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft hevc video extension, hevc video extensions +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()6.0 Medium
- fedoraproject fedora, linux kernal, procps project procps +3 more +5 moreUnder some circumstances, this weakness allows a user who has access to run the “ps” utility on a...2.5 Low
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.c6.5 Medium
- axis communications ab a1001 network door controller, axis a1001 firmware +1 moreHeap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication7.1 High
- open babel babel, openbabel open babel +1 moreOpen Babel has out-of-bounds write in ORCA nAtoms parser (second variant)9.8 Critical
- open babel babel, openbabel open babel +1 moreDuplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser9.8 Critical
- ge cimplicityGE Digital CIMPLICITY Heap-based Buffer Overflow6.6 Medium
- redis, fedoraproject fedora +1 moreHeap overflow issue with the Lua cjson library used by Redis7.0 High
- honeywell experion server, direct station, engineering station +1 more +3 moreServer deserialization missing boundary checks - heap overflow in communication between server and controller7.5 High
- dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 moreUse-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SO…7.8 High
- microsoft paint 3dPaint 3D Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…