CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- hdfgroup hdf5HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the...8.8 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of...9.8 Critical
- bentley viewBentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor, phantompdf +2 moreFoxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote...6.5 Medium
- oisf suricataSuricata's base64 contains an out of bounds write5.3 Medium
- openatom openharmonyHmdfs has a heap buffer overflow vulnerability6.5 Medium
- bytecodealliance wasm micro runtime, webassembly micro runtime +1 moreA heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0...6.2 Medium
- wasm3 project wasm3pywasm3 contains a heap buffer overflow which leads to segmentation fault9.8 Critical
- bluezBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability7.1 High
- musescoreMuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- d-link dir-x3260, dlink dir-x3260 firmware +1 moreD-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor JPG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- d-link dir-3040, dlink dir-3040 firmware +1 moreD-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF popUpMenu Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- tesla model 3, model 3 firmware +1 moreTesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability4.6 Medium
- d-link dap-1360, dlink dap-1360 firmware, dap-2020 firmware +2 moreD-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- d-link dap-1360, dlink dap-1360 firmware, dap-2020 firmware +2 moreD-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- tencent libpag, tencent +1 moreTencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec...5.3 Medium
- zscaler client connectorOut-of-bounds write to heap in pacparser6.5 Medium
- stsaz phiolaBuffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker...7.1 High
- stsaz phiolaBuffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to...8.8 High
- google androidIn multiple locations, there is a possible out of bounds write due to a heap buffer overflow....6.5 Medium
- libmodbuslibmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in...9.8 Critical
- ibm mq applianceIBM MQ code execution7.5 High
- qnap qts, quts hero +1 moreQTS, QuTS hero6.4 Medium
- google chromeHeap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to...7.8 High
- ffmpegBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...7.8 High
- qemu, netapp hci compute node, red hat enterprise linux 6 +15 more +17 moreQemu: sdhci: heap buffer overflow in sdhci_write_dataport()6.0 Medium
- emqx nanomqA heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows...6.8 Medium
- wazuh, wazuh manager +1 moreWazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- ivanti avalancheA Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...9.8 Critical
- ivanti avalancheA Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...9.8 Critical
- Show moreLoading…