CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- adobe after effectsAfter Effects | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Graphics Component Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Remote Desktop Services Elevation of Privilege Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TCP/IP Local Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 copilot, office for android +3 more +5 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreWindows DNS Client Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Volume Manager Extension Driver Remote Code Execution Vulnerability6.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Cryptographic Services Elevation of Privilege Vulnerability7.8 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft .net, .net 10.0, .net 8.0 +11 more +13 more.NET Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows GDI Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft .net, .net 10.0, .net 8.0 +17 more +19 more.NET Elevation of Privilege Vulnerability7.3 High
- siemens simcenter femapHeap-based buffer overflow in Siemens Simcenter Femap7.3 High
- cacalabs libcacalibcaca: Heap OOB write in canvas import functions caused by int overflow7.8 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-48928.4 High
squirrel3DebianSquirrel sqobject.cpp Load heap-based overflow5.1 Medium- osgeo gdalOSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWSDfldsrch heap-based overflow4.8 Medium
- servo smallbitvecsmallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow7.3 High
- vim, neovim +1 moreVim: Heap Buffer Overflow in spell file loading6.6 Medium
- cross-crypto cross-implementationInteger underflow in crypto_sign_open() leads to buffer overflow6.9 Medium
- linux, linux kernel, red hat enterprise linux 10 +26 more +28 morenetfilter: flowtable: strictly check for maximum number of actions7.8 High
- osgeo gdalOSGeo gdal GDapi.c GDnentries heap-based overflow4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWnentries heap-based overflow4.8 Medium
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...8.3 High
- cisco small business smart and managed switchesCisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability7.7 High
- qtType confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash8.7 High
- linux, linux kernel +1 moreipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()9.8 Critical
- linux, linux kernel +1 moreperf/arm-cmn: Reject unsupported hardware configurations7.8 High
- redisbloomRedisBloom RESTORE invalid memory access may allow remote code execution7.7 High
- redistimeseriesRedisTimeSeries RESTORE invalid memory access may allow remote code execution7.7 High
- redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreredis-server RESTORE invalid memory access may allow remote code execution7.7 High
- gpacBuffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702...5.5 Medium
- apache http server, red hat jboss core services for rhel 8, jboss core services on rhel 7 +15 more +17 moreApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()9.8 Critical
- python pillowPillow: Heap buffer overflow with nested list coordinates5.1 Medium
- red hat enterprise linux 6, hardened images, vda-linux busybox mirror +2 moreBusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS7.2 High
- rust-opensslrust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding5.1 Medium
assimpDebianBuffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The...9.8 Critical- hashcatA heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to...9.8 Critical
- opencascade open cascade technologyA heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in...7.1 High
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in Wireshark7.8 High
- Show moreLoading…