CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- cloudflare zlibMemory corruption issues is Cloudflare zlib implementation4.0 Medium
- google androidIn convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due...7.8 High
- micropythonMicroPython objslice.c slice_indices heap-based overflow7.3 High
- jlineJLine vulnerable to out of memory error5.5 Medium
- sqlite, sqlite sqlite3, fedoraproject fedora +3 more +5 moreSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow5.5 Medium
- clickhouse, clickhouse cloud +1 moreUnauthenticated heap buffer overflow in Gorrila codec decompression7.0 High
- clickhouse, clickhouse cloud +1 moreHeap buffer overflow in T64 codec decompression7.0 High
- openimageio, fedora extra packages for enterprise linux, fedora +2 moreOpenimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp7.5 High
- idemia morphowave compact/xp, morphowave sp, morphowave compact firmware +11 more +13 moreHeap Buffer Overflow when reading DESFire card6.8 Medium
- jqlang jqjq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreInternet Connection Sharing (ICS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Media Remote Code Execution Vulnerability7.8 High
- ibm informix dynamic server, informix dynamic server on cloud pak for data +1 moreIBM Informix Dynamic Server buffer overflow8.4 High
- ibm informix dynamic server, informix dynamic server on cloud pak for data +1 moreIBM Informix Dynamic Server buffer overflow6.2 Medium
- ibm informix dynamic server, informix dynamic server on cloud pak for data +1 moreIBM Informix Dynamic Server buffer overflow6.2 Medium
- squid-cache squidSquid's URN Handling can lead to Buffer Overflow9.3 Critical
- sierrawireless aleosImproper input leads to DoS8.3 High
- kepware kepserverex, ge industrial gateway server, ptc keepserverex +6 more +8 moreHeap Based Buffer Overflow in PTC KEPServerEx9.1 Critical
- perl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl: perl for windows binary hijacking vulnerability7.8 High
- perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 morePerl: write past buffer end via illegal user-defined unicode property7.0 High
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...7.8 High
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used...9.8 Critical
- gstreamerGStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- adobe premiere proZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe auditionZDI-CAN-21683: Adobe Audition MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability5.5 Medium
- adobe media encoderZDI-CAN-21696: Adobe Media Encoder MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability9.8 Critical
- microsoft .net framework 3.5 and 4.8.1, visual studio 2022 version 17.6, visual studio 2022 version 17.7 +2 more +4 moreVisual Studio Denial of Service Vulnerability6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows HMAC Key Derivation Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Remote Registry Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Distributed File System (DFS) Remote Code Execution Vulnerability8.0 High
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...9.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality...9.0 Critical
- tenda ax1806 firmwareTenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which...9.1 Critical
- px4 px4-autopilot, dronecode px4 drone autopilot +1 morePX4-Autopilot Heap Buffer Overflow Bug4.4 Medium
- samba, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: heap buffer overflow with freshness tokens in the heimdal kdc5.9 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare25.1 Medium
- softether vpnA heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality...9.0 Critical
- microsoft ole db driver 18 for sql server, ole db driver 19 for sql server, sql server 2019 (cu 22) +5 more +7 moreMicrosoft SQL OLE DB Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft WDAC ODBC Driver Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +9 more +11 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- delta electronics wplsoftDelta Electronics WPLSoft Modbus Data Packet heap-based overflow3.5 Low
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalation7.8 High
- Show moreLoading…