CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- bmc control-m/agentBMC Control-M/Agent memory corruption in SSL/TLS communication8.4 High
- rathenarAthena has heap-based buffer overflow in login server9.8 Critical
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreLocal Security Authority Subsystem Service Elevation of Privilege Vulnerability7.8 High
- pjuhasz json::simdJSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact7.5 High
- rurban cpanel::json::xsCpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact5.6 Medium
- mlehmann json::xsJSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact7.5 High
- microsoft .net 6.0, microsoft.netcore.app.runtime.linux-arm, microsoft.netcore.app.runtime.linux-arm64 +10 more +12 moreEOL .NET 6.0 Runtime Remote Code Execution Vulnerability7.5 High
- imagemagickImageMagick BlobStream Forward-Seek Under-Allocation3.8 Low
- google androidIn Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead...8.8 High
- realtek rtl81xx sdk, wi-fi usb driver +1 moreRealtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability8.8 High
- realtek rtl81xx sdk, wi-fi usb driver +1 moreRealtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability8.8 High
- realtek rtl8811au, wi-fi usb driver +1 moreRealtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability7.8 High
- realtek rtl81xx sdk, wi-fi usb driver +1 moreRealtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability8.8 High
- google androidIn draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write...7.3 High
- google androidIn ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write...7.8 High
- google androidIn syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due...6.7 Medium
- google androidIn appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer...7.8 High
- google androidIn avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer...7.8 High
- netsupport ltd. managerNetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow9.3 Critical
- arcserve udp, unified data protection (udp) +1 moreArcserve UDP < 10.2 Pre-Authentication Heap Overflow9.2 Critical
- arcserve udp, unified data protection (udp) +1 moreArcserve UDP < 10.2 Pre-Authentication Heap Overflow9.2 Critical
- pcre pcre2PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS6.9 Medium
- imagemagickImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow7.5 High
- imagemagickImageMagick vulnerable to heap-buffer-overflow2.0 Low
- sail, sail image decoding library image decoding library +1 moreA memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL...8.8 High
- sail, sail image decoding library image decoding library +1 moreA memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image...8.8 High
- sail, sail image decoding library image decoding library +1 moreA memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL...8.8 High
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The...9.8 Critical
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig...9.8 Critical
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig...9.8 Critical
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the Nex parsing functionality of The Biosig...9.8 Critical
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The...9.8 Critical
- ffmpegRemote code execution via Heap Buffer Overflow in FFmpeg JPEG20007.2 High
- ashlar argon, cobalt, cobalt share +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow8.4 High
- ashlar argon, cobalt, cobalt share +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow8.4 High
- vancluever z2dz2d OOB drawing with new multi-sample anti-aliasing could lead to invalid memory access and corruption7.3 High
- appneta tcpreplaytcpreplay tcpprep cidr.c mask_cidr6 heap-based overflow2.3 Low
scratchpadcrates.ioUser-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows5.5 Mediumarenaveccrates.ioarenavec has multiple memory corruption vulnerabilities in safe APIs8.9 High- netskope clientHeap Overflow in Netskope Endpoint DLP Driver5.7 Medium
- imagemagickImageMagick: heap-buffer overflow in log colorspace handling5.5 Medium
- imagemagickImageMagick: heap-buffer overflow read in MNG magnification with alpha7.6 High
- google chromeHeap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker...8.8 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- Show moreLoading…