CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue5.9 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- apple macosThe issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A...7.5 High
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +9 more +11 moreNGINX ngx_http_dav_module vulnerability8.8 High
- google chromeHeap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote...8.8 High
- ggml llama.cppllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing7.8 High
- struktur libde265NULL Pointer Dereference in libde2658.7 High
- devolutions server, mariadb +1 moreHeap-based Buffer Overflow in MariaDB8.6 High
- pjsip, pjsip pjproject +1 morePJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser8.4 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeHeap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- wofssl wolfsslInteger Overflow in Certificate Chain Allocation1.2 Low
- wolfsslHeap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path1.3 Low
- wofssl wolfsslECH parsing heap buffer overflow8.3 High
- wolfsslBuffer overflow in CRL number parsing in wolfSSL7.2 High
- wolfsslHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function5.0 Medium
- toddr xml::parser, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreXML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack9.8 Critical
- toddr xml::parser, xml\ +1 moreXML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes7.5 High
- htslibHTSlib CRAM decoder vulnerable to buffer overflow7.1 High
- htslibHTSlib BGZF index file reader has a heap buffer overflow7.1 High
- htslibHTSlib CRAM decoder has a heap buffer overflow7.1 High
- htslibHTSlib CRAM decoder vulnerable to buffer overflow8.8 High
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- toddr yaml::syck, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 more +4 moreYAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter9.1 Critical
- softing smartlink sw-ht, smartlink sw-pn +1 moreHTTP POST with specific higher content length leads into heap corruption7.7 High
- tuya arduino-tuyaopenarduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution8.7 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions9.3 Critical
- freerdpFreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5 Medium
- ggml llama.cppllama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix7.8 High
- rui314 moldrui314 mold Object File input-files.cc initialize_sections heap-based overflow4.8 Medium
- gnu libredwgHeap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a...6.5 Medium
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker...8.8 High
- lenovo smart connectA potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in...6.9 Medium
- adobe illustrator, illustrator desktop 2025, illustrator desktop 2026 +2 moreIllustrator | Heap-based Buffer Overflow (CWE-122)7.8 High
- imagemagickImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder5.7 Medium
- Show moreLoading…