CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- quickjs-ng quickjsquickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow6.9 Medium
- nasa cryptolibCryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)7.5 High
- nasa cryptolibCryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion5.7 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...2.3 Low
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- color iccdeviccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()8.8 High
- color iccdeviccDEV has heap-buffer-overflow vulnerability on IccTagXml()7.8 High
- color iccdevHeap Buffer Overflow in iccDEV ToneMap Parser6.6 Medium
- color iccdeviccDEV has unicode buffer overflow in CIccTagTextDescription6.1 Medium
- color iccdeviccDEV has heap buffer overflow in CIccTagLut16::Validate()6.1 Medium
- color iccdeviccDEV has heap buffer overflow in CIccTagLut8::Validate()6.1 Medium
- color iccdeviccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination6.1 Medium
- color iccdevUse After Free and Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write in iccDEV7.8 High
- color iccdeviccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() function8.8 High
- gpsd project gpsd, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moregpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers...9.8 Critical
- fontforgeFontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fontforgeFontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fontforgeFontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- fontforgeFontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- fontforgeFontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- the tcpdump group libpcapOOBR and OOBW in pcap_ether_aton() in libpcap1.9 Low
- gmg137 snap7-rsgmg137 snap7-rs client.rs download heap-based overflow6.9 Medium
- tenda m3, m3 firmware +1 moreTenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow8.7 High
- tenda m3, m3 firmware +1 moreTenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow8.7 High
- tenda m3, m3 firmware +1 moreTenda M3 setVlanPolicyData formSetVlanPolicy heap-based overflow8.7 High
- libmingBuffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8.7.5 High
- gnu binutilsA buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26...7.5 High
- gimpGIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- nsf unidata netcdf-c, unidata netcdf +1 moreNSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- floooh sokolfloooh sokol sokol_gfx.h _sg_pipeline_common_init heap-based overflow4.8 Medium
- webassembly binaryenWebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow4.8 Medium
- capstone-engine capstoneCapstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow4.8 Medium
- autodesk autocad, shared components +1 moreCATPRODUCT File Parsing Heap-Based Overflow Vulnerability7.8 High
- autodesk shared componentsPRT File Parsing Memory Corruption Vulnerability7.8 High
- gmg137 snap7-rsgmg137 snap7-rs client.rs as_ct_write heap-based overflow6.9 Medium
- gmg137 snap7-rsgmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow6.9 Medium
- eximExim before 4.99.1 allows remote heap corruption that will be further described on 2025-12-18.7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 22h3, windows 11 version 23h2, windows 11 version 24h2 +9 more +11 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- adobe dng sdk, dng software development kit +1 moreDNG SDK | Heap-based Buffer Overflow (CWE-122)7.1 High
- dannyvankooten pepperA heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit...8.4 High
- sge-plc1000 sge-plc50 circutor, circutor sge-plc1000 firmware, sge-plc50 firmware +2 moreHeap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC508.5 High
- sge-plc1000 sge-plc50 circutor, circutor sge-plc1000 firmware, sge-plc50 firmware +2 moreStack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC5010.0 Critical
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8196, mt8676, mt8678, mt8792, mt8793 +1 moreIn display, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- avira antivirus, gen digital avira antivirus +1 moreAvira antivirus engine heap buffer OOB read when scanning a malformed file7.8 High
- Show moreLoading…