CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The...7.3 High
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The...7.3 High
- autodesk revitA maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause...7.8 High
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreHeap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy....7.5 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- trimble sketchup, sketchup viewer +1 moreTrimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- nikon nef codecNikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.0 High
- tungsten automation power pdfTungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- tungsten automation power pdfTungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- tungsten automation power pdfTungsten Automation Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- tungsten automation power pdfTungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- luxion keyshotLuxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- luxion keyshotLuxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- wyze cam v3, cam v3 firmware +1 moreWyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability9.6 Critical
- irfanview, irfanview formats +1 moreIrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- phpSingle byte overread with convert.quoted-printable-decode filter4.8 Medium
- dassault edrawingsHeap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 20257.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe illustratorIllustrator | Heap-based Buffer Overflow (CWE-122)7.8 High
- fortinet fortianalyzer, fortimanager, fortimanager cloud +2 moreA heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through...5.3 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +6 more +8 moreSQL Server Native Client Remote Code Execution Vulnerability8.8 High
- Show moreLoading…