CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- hdfgroup hdf5HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow4.8 Medium
- No product listedWINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENT_LENGTH...6.5 Medium
- python pillowPillow Vulnerable to Write Buffer Overflow on BCn encoding7.1 High
- electronElectron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath4.4 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbHeap buffer overflow in picserver8.0 High
- hdfgroup hdf5HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow4.8 Medium
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- hdfgroup hdf5HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow4.8 Medium
- libuclvstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow4.8 Medium
- sparklemotion nokogirisparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow4.8 Medium
- sparklemotion nokogirisparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow4.8 Medium
- sony xav-ax8500, xav-ax8500 firmware +1 moreSony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- sony xav-ax8500, xav-ax8500 firmware +1 moreSony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- openvpn ovpn-dco-winBuffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier...5.5 Medium
- hdfgroup hdf5HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow4.8 Medium
- cisco clamavClamAV PDF Scanning Buffer Overflow Vulnerability9.8 Critical
- ls electric gmwin 4Out-of-bounds Read in Write in LS Electric GMWin 48.4 High
- assimpOpen Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow4.8 Medium
- apache nuttx, apache software foundation nuttx rtos: tools/bdf-converter. +1 moreApache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.9.8 Critical
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +2 more +4 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows SMB Client Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c6.6 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.3 Medium
- wolfbox level 2 ev charger, level 2 ev charger firmware +1 moreWOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- huawei harmonyosBuffer overflow vulnerability in the DFile module Impact: Successful exploitation of this...5.5 Medium
- sonos era 300, era 300 firmware +1 moreSonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- nekernel-org nekernelNeKernel has Heap Overflow in `rt_copy_memory`8.6 High
- mediatek mt7902 firmware, mt7921 firmware, mt7922 firmware +3 more +5 moreIn Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check....9.8 Critical
- google androidIn multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap...7.8 High
- hdfgroup hdf5hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset...8.8 High
- hdfgroup hdf5hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.8.8 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple heap buffer overflows in tga parser7.3 High
toodeecrates.iotoodee is vulnerable to Heap Buffer Overflow through its DrainCol Destructor8.8 High- ubiquiti inc unifi protect camerasA malicious actor with access to the management network could execute a remote code execution ...10.0 Critical
- Show moreLoading…