CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- color iccdeviccDEV has a heap-based buffer overflow in icCurvesFromXml()7.8 High
- color iccdeviccDEV has a heap-based buffer overflow write in CIccMatrixMath::SetRange()7.8 High
- color iccdeviccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert()6.1 Medium
- color iccdeviccDEV has a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp()7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft azure linux virtual machines with azure diagnostics extension, linux diagnostic extension +1 moreLinux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Telephony Service Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 10 21h2 +1 more +3 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +7 more +9 moreMultiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability8.8 High
- mozilla firefoxHeap buffer overflow in the Audio/Video: Playback component in Firefox for Android8.8 High
- imagemagickImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation6.8 Medium
- imagemagickImageMagick has a heap Buffer Overflow in WaveletDenoiseImage5.5 Medium
- imagemagickImageMagick has a heap-based buffer overflow in UHDR encoder6.8 Medium
- imagemagickImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer6.8 Medium
- pnggroup libpngpnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow4.8 Medium
- huawei harmonyosBuffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this...5.9 Medium
- google chromeHeap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote...8.8 High
- cisco secure firewall threat defense, snort, cyber vision +3 more +5 moreCisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Heap Overflow Denial of Service Vulnerability5.8 Medium
- mackron dr libs, dr libs dr wav.h +1 moremackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File6.8 Medium
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The...9.8 Critical
- libbiosig project libbiosigA heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The...8.1 High
- xlnt-community xlntxlnt-community xlnt Compound Document binary.hpp append heap-based overflow4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)7.4 High
- yosyshq yosysYosysHQ yosys BLIF File rtlil.h set heap-based overflow4.8 Medium
- jarikomppa soloudjarikomppa soloud Audio File soloud_wav.cpp loadflac heap-based overflow4.8 Medium
- google androidIn multiple locations, there is a possible out of bounds read and write due to a heap buffer...9.8 Critical
- vimVim has a heap-buffer-overflow and a segmentation fault5.3 Medium
- vimVim has Heap-based Buffer Overflow and OOB Read in :terminal4.4 Medium
- vimVim has Heap-based Buffer Overflow in Emacs tags parsing4.4 Medium
- libvipslibvips bandrank.c vips_bandrank_build heap-based overflow4.8 Medium
- leont crypt::sysrandom::xs, crypt\ +1 moreCrypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes()7.5 High
- golioth pouchGolioth Pouch (prior to commit 1b2219a1) BLE GATT Heap-based Buffer Overflow7.2 High
- imagemagick, dlemstra magick.net +1 moreImageMagick has a heap Buffer Over-read in its DJVU image format handler4.0 Medium
- imagemagickImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization2.1 Low
- libvipslibvips csvload.c vips_foreign_load_csv_build heap-based overflow4.8 Medium
- imagemagickImageMagick has heap overflow in pcd decoder that leads to out of bounds read.6.5 Medium
- imagemagickImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write6.5 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions8.2 High
- imagemagick, dlemstra magick.net +1 moreImageMagick: Out of bounds read in multiple coders read raw pixel data5.1 Medium
- free5gc go-upffree5GC has Heap Buffer Overflow in UPF Leading to Denial of Service2.7 Low
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow7.2 High
- libvipslibvips source.c vips_source_read_to_memory heap-based overflow2.0 Low
- happyseafox sailSAIL: Heap-based Buffer Overflow in Sail-codecs-xwd8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- pjsip pjproject, pjsip +1 morePJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer8.1 High
- hdfgroup hdf5, red hat enterprise linux ai (rhel ai) 3 +1 moreHDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +11 more +13 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- Show moreLoading…