CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- kofax power pdfKofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- upx, fedoraproject fedora +1 moreUPX bele.h get_ne64 heap-based overflow5.5 Medium
- ermig1979 simdermig1979 Simd SimdMemoryStream.h ReadUnsigned heap-based overflow5.5 Medium
- blosc c-blosc2c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow7.3 High
- blosc c-blosc2c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow7.3 High
- axiosys bento4An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom...6.5 Medium
- appneta tcpreplayappneta tcpreplay get.c get_layer4_v6 heap-based overflow5.3 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an...8.6 High
- rt-threadA heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.8.4 High
- rt-threadA heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.8.4 High
- rt-threadA heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.8.4 High
- eclipse threadxInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()7.3 High
- rockwell automation arena simulation, rockwellautomation arena, arena simulation software +2 moreRockwell Automation Arena Simulation Vulnerable To Memory Corruption7.8 High
- jhead project jheadMatthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow6.3 Medium
- dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 20247.8 High
- eprosima fast-dds, fast dds +1 moreManipulated DATA Submessage causes a heap-buffer-overflow error9.7 Critical
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- dell nx3230 firmware, nx3330 firmware, poweredge platform +23 more +25 moreDell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high...7.2 High
- adobe bridgeAdobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe premiere proZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- cimg, clmg project clmg +1 moreA heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library:...7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft open management infrastructure, azure automation, azure automation update management +9 more +11 moreOpen Management Infrastructure (OMI) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- gpacHeap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows...8.8 High
- zlog project zlogzlog 1.2.16 has a heap-based buffer overflow in struct zlog_rule_s while creating a new rule that...9.8 Critical
- ailux imx6, imx6 bundle +1 moreA CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the ...7.5 High
- dell digital delivery, digital delivery (d3) +1 moreDell Digital Delivery, versions prior to 5.0.86.0, contain a Buffer Overflow vulnerability. A...7.0 High
- microdicom dicom viewerMicroDicom DICOM Heap-based Buffer Overflow7.8 High
- google androidIn TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could...8.4 High
- samsung exynos 1080, exynos 1280, exynos 1330 +29 more +31 moreA vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with...8.4 High
- qpdf project qpdf, fedoraproject fedora +1 moreHeap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via...5.5 Medium
- 3ds edrawings, solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 20247.8 High
- xnview nconvertBuffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to...6.5 Medium
- ggml llama.cppA heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality...8.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- apple macos, tvos, watchos +3 more +5 moreThe issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS...7.8 High
- libbiosig project libbiosig, fedoraproject fedora +1 moreA heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig...9.8 Critical
- weston embedded uc-http, silabs gecko platform, gecko software development kit +2 moreA heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...10.0 Critical
- tug tex livetexlive-bin commit c515e was discovered to contain heap buffer overflow via the function...8.1 High
- qemuAn issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c...5.3 Medium
- adobe auditionZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- freebsdmpr/mps/mpt driver ioctl heap out-of-bounds write7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- Show moreLoading…