CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- zephyrproject zephyrBluetooth: ots: missing buffer length check6.3 Medium
- bandisoft bandiviewBandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability...6.3 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.5 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.8 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.8 Medium
- cute png png, randygaul cute png +1 morecute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at...7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- giflib project giflibGiflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.6.5 Medium
- tianocore edk2Integer overflow in PeCoffLoaderRelocateImage5.9 Medium
- assimpAssimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.4.3 Medium
- cisco utd snort ips engine software, unified threat defense snort intrusion prevention system engine +1 moreCisco UTD Snort IPS Engine Software for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability5.8 Medium
- asg017 sqlite-vecHeap-based Buffer Overflow in sqlite-vec5.5 Medium
- zte mf296r, mf296r firmware +1 moreBuffer Overflow Vulnerability in ZTE MF296R4.5 Medium
- assimpHeap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local...8.4 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote...8.8 High
- micropythonMicroPython objint.c mpz_as_bytes heap-based overflow6.9 Medium
- micropythonMicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow6.9 Medium
- vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 moreHeap-overflow vulnerability9.8 Critical
- zephyrproject zephyrBT: HCI: adv_ext_report Improper discarding in adv_ext_report7.6 High
- zephyrproject zephyrBT: Missing length checks of net_buf in rfcomm_handle_data6.8 Medium
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe after effectsAfter Effects | Heap-based Buffer Overflow (CWE-122)7.8 High
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker...8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows TCP/IP Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows TCP/IP Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 28) +8 more +10 moreMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 28) +8 more +10 moreMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability8.8 High
- samsung open source escargotHeap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows...6.9 Medium
- siemens opcenter quality, opcenter rdnl, simatic pcs neo v4.0 +11 more +13 moreA vulnerability has been identified in SIMATIC Information Server 2022 (All versions), SIMATIC...9.3 Critical
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: heap buffer overflow in openpgp driver when generating key2.9 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero5.3 Medium
- vimheap-buffer-overflow in Vim4.5 Medium
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker...8.8 High
- aertherwide exiftagsBuffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute...7.8 High
- vimheap-buffer-overflow in ins_typebuf() in Vim < 9.1.06974.5 Medium
- vim, netapp bootstrap os +1 moreheap-buffer-overflow in do_search() in Vim < 9.1.06894.5 Medium
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker...8.8 High
- zephyrproject zephyrBT:Classic: Multiple missing buf length checks7.6 High
- zephyrproject zephyrBT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero7.6 High
- zoom rooms, rooms controller, workplace +4 more +6 moreZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow6.5 Medium
- zoom rooms, rooms controller, workplace +4 more +6 moreZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow6.5 Medium
- zoom rooms, rooms controller, workplace +4 more +6 moreZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow6.5 Medium
- zoom rooms, workplace, workplace app +4 more +6 moreZoom Workplace Apps and Rooms Clients - Buffer Overflow8.5 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 TIF File Parsing Heap Memory Corruption7.8 High
- Show moreLoading…