CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft .net, .net 9.0, visual studio 2022 version 17.10 +6 more +8 more.NET Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- vim, neovim, netapp bootstrap os +2 moreheap-buffer-overflow with visual mode in Vim < 9.1.10034.2 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversal6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsync6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client files6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contents7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handling9.8 Critical
- redisearchRediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCE7.0 High
- redistimeseriesRedisTimeSeries Integer Overflow Remote Code Execution Vulnerability7.0 High
- oisf suricataSuricata segfault on StreamingBufferSlideToOffsetWithRegions5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in lib/openjp2/j2k.c5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in bin/common/color.c5.6 Medium
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gnu grub2GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock...8.8 High
- harfbuzzHarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer9.3 Critical
- fortinet fortiosA heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in...5.4 Medium
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- siemens opcenter execution foundation, opcenter intelligence, opcenter quality +9 more +11 moreA vulnerability has been identified in Opcenter Execution Foundation (All versions), Opcenter...9.3 Critical
- zephyrproject zephyrBluetooth: classic: avdtp: missing buffer length check7.5 High
- rti connext professionalBuffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows O…6.9 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe premiere proPremiere Pro | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - sampler, substance 3d sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - sampler, substance 3d sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe media encoderMedia Encoder | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability6.6 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows IP Routing Management Snapin Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Task Scheduler Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability6.6 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- Show moreLoading…