CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft lightgbmLightGBM Remote Code Execution Vulnerability8.1 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Service Elevation of Privilege Vulnerability7.8 High
- realtimelogic sharksslA Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL 09...5.3 Medium
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreHeap overflow in CM_main.exe binary in Enel X JuiceBox9.0 Critical
- eclipse mosquittoEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback7.2 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreAutodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +7 more +9 moreAutodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Code Execution Vulnerability7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability5.9 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- delta electronics cncsoft-g2Heap-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G28.4 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe animateAnimate | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft Windows Storage Port Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +2 more +4 moreWindows Local Security Authority (LSA) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreMicrosoft ActiveX Data Objects Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 24h2, windows 11 24h2 +1 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Server Remote Code Execution Vulnerability8.8 High
- microsoft azure service fabric for linux, azure service fabric +1 moreAzure Service Fabric for Linux Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.8 High
- siemens simcenter femap v2306, simcenter femap v2401, simcenter femap v2406 +1 more +3 moreA vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran...7.3 High
- Show moreLoading…