CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- google chromeHeap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker...8.8 High
- squirrel-lang squirrelSquirrel sqobject.h operator heap-based overflow4.8 Medium
- admesh project admeshadmesh normals.c stl_check_normal_vector heap-based overflow4.8 Medium
- ddick crypt::urandom, crypt\ +1 moreCrypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom()7.5 High
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpx8.8 High
- linuxHID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()7.8 High
- free5gcA heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote...7.5 High
- mersenne prime95Prime95 Version 29.8 build 6 - Buffer Overflow (SEH)8.4 High
- opennav nav2, ros-navigation navigation2 +1 moreCritical Heap Out-of-bounds Access in `pf_cluster_stats()` via Malicious /initialpose Covariance -- Potential Remote Code Execution9.3 Critical
- postgresql, red hat enterprise linux 10, enterprise linux 9 +1 more +3 morePostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory8.2 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary code8.8 High
- No product listedA heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7...7.5 High
- google chromeHeap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker...8.8 High
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central1.3 Low
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability7.3 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +4 more +6 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability7.3 High
- microsoft excel, office, 365 apps +7 more +9 moreMicrosoft Excel Elevation of Privilege Vulnerability7.8 High
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantize8.3 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- wedding slideshow studio slideshow studio, wedding-slideshow-studio wedding slideshow studio +1 moreWedding Slideshow Studio 1.36 - 'Key' Buffer Overflow8.4 High
- vim, neovim +1 moreHeap Overflow in Vim6.6 Medium
- huawei harmonyosBuffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this...6.9 Medium
- huawei harmonyosHeap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of...7.3 High
- color iccdeviccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()7.8 High
- color iccdeviccDEV vulnerable to Heap Buffer Overflow in CIccIO::WriteUInt16Float()7.8 High
- google chromeHeap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker...8.8 High
- lexmark cstat, cxtat, mslbd, mxlbd, cslbl, cxlbl, cslbn, cxlbn, cstmh, cxtmh, cstpp, cxtpp, mslsg, mxlsg, mxtct, msngm, mstgm, mxngm, mxtgm, csngv, cstgv, cxtgv, msngw, mstgw, mxtgw, cstls, cxtls, mxtls, cstmm, cxtmm, cstpc, cxtpc, mxtpm, msnsn, mstsn, mxtsn, csnzj, cstzj, cxnzj, cxtzj +1 moreHeap-based buffer overflow vulnerability in Postscript interpreter6.9 Medium
- eprosima fast-dds, fast dds, debian linux +2 moreFastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)7.2 High
- eprosima fast-dds, fast dds, debian linux +2 moreFastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled1.7 Low
- eprosima fast-dds, fast dds +1 moreFastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled1.7 Low
- tp-link systems inc. archer ax12 v1, archer ax53 v1.0, tp-link archer ax53 firmware +2 moreHeap-based Buffer Overflow Vulnerability in Archer AX53 and AX128.6 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- tp-link systems inc. archer ax53 v1.0, tp-link archer ax53 firmware +1 moreHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX537.3 High
- Show moreLoading…