CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Digest Authentication Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Digest Authentication Remote Code Execution Vulnerability8.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- gnu binutilsGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow2.3 Low
- delta electronics cncsoft-g2Heap-based Buffer Overflow in CNCSoft-G27.8 High
- ashlar cobalt, ashlar-vellum argon, lithium +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium Heap-based Buffer Overflow8.4 High
- axiomatic bento4Axiomatic Bento4 Ap4DataBuffer.h GetData heap-based overflow6.3 Medium
- freebsdUninitialized kernel memory disclosure via ktrace(2)4.9 Medium
- axiomatic bento4Axiomatic Bento4 mp42aac ReadPartial heap-based overflow6.9 Medium
- axiomatic bento4Axiomatic Bento4 mp42aac ReadBits heap-based overflow6.9 Medium
- sungrowpower winet-s firmwareSunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow...9.8 Critical
- openimageioOpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component...9.8 Critical
- google chromeObject corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to...8.2 High
- clamav, cisco secure endpoint, secure endpoint private cloud +2 moreClamAV OLE2 File Format Decryption Denial of Service Vulnerability5.3 Medium
- lexmark printer firmwareA buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.8.8 High
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote...8.8 High
- lenovo app store, browser, pc manager +2 moreA potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo...4.7 Medium
- lenovo app store, browser, pc manager +2 moreA potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store...4.7 Medium
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft .net, .net 8.0, .net 9.0 +10 more +12 more.NET and Visual Studio Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Digital Media Elevation of Privilege Vulnerability6.6 Medium
- microsoft access, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Access Remote Code Execution Vulnerability7.8 High
- microsoft access, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Access Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10) +7 more +9 moreVisual Studio Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- Show moreLoading…