CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft teams, dynamics 365 guides, dynamics 365 remote assist +10 more +12 moreMicrosoft Teams Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.8 High
- microsoft 365 copilot, office for android, office for universal +36 more +38 moreGDI+ Remote Code Execution Vulnerability9.8 Critical
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 copilot, office for android +1 more +3 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Media Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 moreDirectX Graphics Kernel Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +8 more +10 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWin32k Elevation of Privilege Vulnerability7.3 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy...7.5 High
- nasa cryptolibHeap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`8.6 High
- nasm netwide assember, netwide assembler +1 moreNASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow4.8 Medium
- meta platforms, inc executorchExecuTorch vulnerable to Heap-based Buffer Overflow9.8 Critical
- meta platforms, inc executorchExecuTorch heap buffer overflow vulnerability9.8 Critical
- ibm tivoli monitoringIBM Tivoli Monitoring code execution8.1 High
- ibm tivoli monitoringIBM Tivoli Monitoring code execution8.1 High
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker...9.1 Critical
- huawei harmonyos:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful...6.8 Medium
- rockwell automation arena® simulation, rockwellautomation arena +1 moreRockwell Automation Heap-based Buffer Overflow In Arena® Simulation8.4 High
- rockwell automation arena® simulation, rockwellautomation arena +1 moreRockwell Automation Heap-based Buffer Overflow In Arena® Simulation8.4 High
- academysoftwarefoundation openexrOpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing8.4 High
- apple macosA memory corruption issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- autodesk autocad, shared components +1 more3DM File Parsing Heap-Based Overflow Vulnerability7.8 High
- tenda ac10, ac10 firmware +1 moreTenda AC10 RequestsProcessLaid heap-based overflow8.7 High
- tenda ac8 firmwareTenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo...6.5 Medium
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreA Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote,...7.5 High
- lenovo app store, browser, pc manager +2 moreA buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5...8.4 High
- 7-zipGHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder5.5 Medium
- fortinet fortiosA heap-based buffer overflow in Fortinet FortiOS versions 7.6.0 through 7.6.2, 7.4.0 through 7.4...4.0 Medium
- emqx nanomqNanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a...6.5 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreGNU Binutils objcopy.c copy_section heap-based overflow4.8 Medium
- meta platforms, inc executorchExecuTorch vulnerable to Heap-based Buffer Overflow attack8.1 High
- ggml-org llama.cppInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf8.9 High
- Show moreLoading…