CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +14 more +16 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Remote Desktop Licensing Service Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Imaging Component Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Windows Performance Data Helper Library Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- realtek rtl819x jungle sdk, level1 wbr-6013 firmware, levelone wbr-6013 +2 more +4 moreA heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array...7.2 High
- mongodb inc libbsonMongoDB C Driver bson_string_append may be vulnerable to a buffer overflow5.3 Medium
- artifex ghostscriptArtifex Ghostscript before 10.0.3.0 has a heap-based pointer disclosure (observable in a...3.3 Low
- 7-zip 7zipThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer...8.4 High
- ffmpegFFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column.8.4 High
- zziplib project zziplibHeap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of...4.3 Medium
- struktur libde265Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application...6.5 Medium
- struktur libde265Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application...6.5 Medium
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products7.8 High
- autodesk autocad, advance steel, autocad architecture +7 more +9 moreMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- parallels desktopParallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability8.2 High
- sonicwall sonicosHeap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote...6.5 Medium
- vmware vcenter server, cloud foundation +1 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...9.8 Critical
- vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...9.8 Critical
- elastic elasticsearchElasticsearch StackOverflow vulnerability4.9 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWin32k Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…