CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- fortinet fortianalyzer cloud, fortimanager cloud +1 moreA heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4,...7.3 High
- imagemagickImageMagick: Heap out-of-bounds write in JP2 encoder5.5 Medium
- imagemagickImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float5.5 Medium
- imagemagickImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders6.2 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has a Heap Buffer Overflow via MVG decoder7.5 High
- imagemagickImageMagick: Heap BufferOverflow write of single zero byte when parsing XML5.3 Medium
- jqlang jqjq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow8.2 High
- huawei harmonyosOut-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this...10.0 Critical
- samsung escargotHeap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds...7.4 High
- ffmpegA heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to...7.5 High
- hdfgroup hdf5HDF5 H5T__ref_mem_setnull Heap Buffer Overflow5.5 Medium
- wolfssl1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore2.3 Low
- wolfsslDTLS 1.3 ACK heap buffer overflow8.3 High
- wolfsslHeap buffer overflow in CertFromX509() via AuthorityKeyIdentifier6.3 Medium
- wolfsslHeap Out-of-Bounds Write in DecodeObjectId() in wolfSSL2.3 Low
- google chromeHeap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...4.3 Medium
- google chromeHeap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote...8.8 High
- google chromeHeap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...4.3 Medium
- google chromeHeap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote...4.3 Medium
- google chromeHeap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...8.8 High
- microsoft symcryptSymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation6.1 Medium
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +26 more +28 moreHeap-Based Buffer Overflow in Power Management IC7.8 High
- openprinting cupsOpenPrinting CUPS: Heap overflow in `get_options()`5.3 Medium
- nasa cfs, core flight system +1 moreNASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow5.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +22 more +24 morenfsd: fix heap overflow in NFSv4.0 LOCK replay cache9.8 Critical
- belden hirschmann eaglesdvHirschmann EagleSDV Denial of Service via TLS8.7 High
- tukaani xzXZ Utils: Buffer overflow in lzma_index_append()1.7 Low
- tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 moreHeap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS7.1 High
- tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 moreHeap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS7.1 High
- tp link systems inc. tapo c100 v5, tapo c101 v5, tapo c200 v3 +4 more +6 moreHeap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in multiple TP-Link Tapo Cameras7.1 High
- automattic mongooseCesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow6.9 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: integer overflow lead to OOB in HTJ2K decoder8.4 High
- google chromeHeap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote...8.8 High
- axiomatic bento4Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow4.8 Medium
- axiomatic bento4Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow4.8 Medium
- color iccdeviccDEV: HBO in icMemDump()6.2 Medium
- color iccdeviccDEV: HBO in CTiffImg::WriteLine()6.2 Medium
- color iccdeviccDEV: SEGV in CIccTagArray::Cleanup()6.2 Medium
- color iccdeviccDEV: HBO in CIccMpeSpectralMatrix::Describe()6.2 Medium
- gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 moreGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image7.5 High
- nothings stb imageNothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow4.8 Medium
- freerdpFreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write7.1 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- Show moreLoading…