CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- adobe indesign, indesign desktop +1 moreIndesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability7.8 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()7.4 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc for mac 2021 +1 more +3 moreMicrosoft Excel Remote Code Execution Vulnerability7.1 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows OLE Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows IP Routing Management Snapin Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows IP Routing Management Snapin Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows IP Routing Management Snapin Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc for mac 2021 +1 more +3 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1607, windows server 2016, windows server 2016 (server core installation) +1 more +3 moreWindows Network Virtualization Remote Code Execution Vulnerability9.1 Critical
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unbound4.8 Medium
- ffmpegFFmpeg swresample.c fill_audiodata heap-based overflow6.9 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker...8.8 High
- ffmpegFFmpeg pnmdec.c pnm_decode_frame heap-based overflow6.9 Medium
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability7.8 High
- clickhouseSpecially crafted request could caused undefined behaviour which may lead to Remote Code Execution.8.1 High
- google chromeHeap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker...8.8 High
- dbohdan hicolorA heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause...6.2 Medium
- dbohdan hicolorA heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows...6.2 Medium
- dbohdan hicolorA heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0...5.5 Medium
- samsung escargotHeap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows...6.9 Medium
- sonicwall sonicosHeap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated...7.5 High
- open5gsOpen5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c.9.8 Critical
- juniper junos, junos os +1 moreJunos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface8.7 High
- everest everest-coreEVerest has an integer overflow in the "v2g_incoming_v2gtp" function9.1 Critical
- delta electronics cncsoft-g2Heap-based Buffer Overflow in Delta Electronics CNCSoft-G28.4 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign TIF File Parsing Heap Memory Corruption7.8 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 RLE File Parsing Heap Memory Corruption7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +4 more +6 moreWindows Remote Desktop Licensing Service Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreSecure Boot Security Feature Bypass Vulnerability6.8 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +8 more +10 moreMicrosoft Xbox Remote Code Execution Vulnerability7.1 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 version 22h3 +7 more +9 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft ole db driver for sql server, ole db driver 18 for sql server, ole db driver 19 for sql server +6 more +8 moreMicrosoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- Show moreLoading…