CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- kamailioKamailio Configuration File rvalue.c rve_destroy heap-based overflow4.8 Medium
- openwrtOpenWrt ubusd vulnerable to heap buffer overflow7.9 High
- abb terra ac wallbox (jp), terra ac wallbox (mid/ ce) -terra ac juno ce, terra ac wallbox (mid/ ce) -terra ac mid +3 more +5 moreHeap Memory Corruption Vulnerability6.1 Medium
- No product listedbftpd Configuration File options.c expand_groups heap-based overflow2.0 Low
nftnlcrates.iolibnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)9.3 Critical- No product listedAn out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05...8.2 High
- adobe bridgeBridge | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe bridgeBridge | Heap-based Buffer Overflow (CWE-122)5.5 Medium
- adobe animateAnimate | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Authentication Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows COM+ Event System Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2025, windows server 2025 (server core installation) +1 more +3 moreAzure Local Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows URL Parsing Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.8 High
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0...6.5 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4...5.7 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version...6.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7603, mt7615, mt7622, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...8.8 High
- mediatek software development kit, mediatek, inc. mt6990, mt7990, mt7991, mt7992, mt7993, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...8.8 High
- google chromeHeap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to...8.1 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow4.8 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...5.3 Medium
- assimpOpen Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow4.8 Medium
- assimpOpen Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow4.8 Medium
- gimp, debian linux +1 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- google chromeHeap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker...7.1 High
- google chromeHeap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker...8.8 High
- abb terra ac wallboxHeap Memory Corruption Vulnerability6.9 Medium
- gimp, debian linux +1 moreGIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow4.8 Medium
- wazuhHeap buffer overflow in wazuh-analysisd6.5 Medium
- ogre3d ogreOGRECave Ogre Image OgreSTBICodec.cpp encode heap-based overflow4.8 Medium
- libuclvstakhov libucl ucl_util.c ucl_include_common heap-based overflow4.8 Medium
- openbabel open babelOpen Babel chemkinformat.cpp CheckSpecies heap-based overflow4.8 Medium
- openbabel open babelOpen Babel smilesformat.cpp ParseSmiles heap-based overflow4.8 Medium
- cisco adaptive security appliance (asa) software, ios xe software, ios xr software +6 more +8 moreA vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA)...9.0 Critical
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may...3.3 Low
- tenda ac9 firmwareBuffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.7.5 High
- dlink di-7100g firmwareBuffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the...7.5 High
- free5gcFree5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile...7.5 High
- broadcom tcpreplayA heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1....7.5 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker...8.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 morePDF File Parsing Heap-Based Buffer Overflow Vulnerability7.8 High
- Show moreLoading…