CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2022 23h2 +1 moreMicrosoft WDAC ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreInternet Connection Sharing (ICS) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2022 23h2 +1 moreWindows Kernel Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Kernel Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft ActiveX Data Objects Remote Code Execution Vulnerability8.8 High
- siemens tecnomatix plant simulation v2201, tecnomatix plant simulation v2302, tecnomatix plant simulation +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201...7.8 High
- enlightenment imlib2An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause...8.8 High
- fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)5.5 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker...9.8 Critical
- libgit2libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`8.6 High
- gnu indentIndent: heap-based buffer overflow in set_buf_break()5.5 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud5.5 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud5.5 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud5.5 Medium
- academy software foundation openexrOpenEXR Heap Overflow in Scanline Deep Data Parsing9.1 Critical
- google androidIn setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer...7.5 High
- google androidIn multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer...7.8 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()8.2 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: heap-based buffer overflow in __vsyslog_internal()8.4 High
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service7.5 High
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +12 more +14 moreShim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems7.4 High
- freerdpFreeRDP integer Overflow leading to Heap Overflow3.7 Low
- gnu coreutils, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreCoreutils: heap overflow in split --line-bytes with very long lines5.5 Medium
- red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension, enterprise linux 7 +14 more +16 moreXorg-x11-server: heap buffer overflow in disabledevice7.8 High
- red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension, enterprise linux 7 +12 more +14 moreXorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent7.8 High
- nvidia dgx a100, dgx a100 firmware +1 moreCVE4.2 Medium
- bluezBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash5.5 Medium
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.2 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...8.1 High
- ami megarac sp-x, megarac spx +1 moreheap memory overflow8.3 High
- ami megarac sp-x, megarac spx +1 moreHeap-based Buffer Overflow8.3 High
- ami megarac sp-x, megarac spx +1 moreHeap-based Buffer Overflow8.3 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +4 more +6 moreWindows libarchive Remote Code Execution Vulnerability7.3 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows libarchive Remote Code Execution Vulnerability7.3 High
- microsoft 3d viewer, office 2019, office ltsc for mac 2021 +5 more +7 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- tianocore edk2Heap Buffer Overflow in Tcg2MeasurePeImage7.0 High
- tianocore edk2Heap Buffer Overflow in Tcg2MeasureGptTable7.0 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- bluezBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability7.1 High
- Show moreLoading…