CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- freerdpFreeRDP has a Heap-buffer-overflow in audio_formats_free8.7 High
- freerdpFreeRDP has a heap-buffer-overflow in urb_select_interface8.7 High
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM leaks a heap address when PIL throws an error9.8 Critical
- mediatek software development kit, mediatek, inc. mediatek chipset, openwrt +2 moreIn wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead...8.8 High
- teamviewer dex, digital employee experience +1 moreInteger underflow in Content Distribution Service UDP handler6.5 Medium
- simsong bulk extractorbulk_extractor has Heap-based Buffer Overflow vulnerability5.5 Medium
- color iccdeviccDEV has a heap-buffer-overflow in icXmlParseTextString()6.1 Medium
- is-daouda is-engineOut-of-bounds write in is-Engine6.5 Medium
- ttttupup wxhelpera heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.10.0 Critical
- dassault systèmes solidworks edrawingsHeap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- color iccdeviccDEV has Heap Buffer Overflow in icCurvesFromXml()8.8 High
- color iccdeviccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()8.8 High
- color iccdeviccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()8.8 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability8.1 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreHeap buffer overflow with attacker-controlled data in XBM parser8.1 High
- freerdpFreeRDP has heap-buffer-overflow in Glyph_Alloc5.5 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +6 more +8 moreFreeRDP has heap-buffer-overflow in clear_decompress_bands_data7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in clear_decompress_residual_data7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in clear_decompress7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in planar_decompress_plane_rle7.7 High
- quickjs-ng quickjsquickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow5.3 Medium
- mapnikMapnik dbfile.cpp string_value heap-based overflow4.8 Medium
- byvoid opencc, open chinese convert +1 moreBYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflow4.8 Medium
- raylibraysan5 raylib rtext.c GenImageFontAtlas heap-based overflow4.8 Medium
- gpacA heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a...5.5 Medium
- gpacA heap overflow in the uncv_parse_config() function of GPAC v2.4.0 allows attackers to cause a...5.5 Medium
- gpacA heap overflow in the ghi_dmx_declare_opid_bin() function of GPAC v2.4.0 allows attackers to...5.5 Medium
- gpacA heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a...6.5 Medium
- freerdpFreeRDP has a heap-buffer-overflow in drive_process_irp_read6.8 Medium
- adobe bridgeBridge | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Kernel Memory Elevation of Privilege Vulnerability7.8 High
- fortinet fortios, fortiswitchmanager, fortisase +3 more +5 moreA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...7.4 High
- linuxethtool: Avoid overflowing userspace buffer on stats query7.8 High
- quickjs-ng quickjsquickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow5.3 Medium
- Show moreLoading…