CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- oisf suricataSuricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load3.3 Low
- mcdope pam usbpam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets6.7 Medium
- No product listedTeamSpeak 3 Server ECC Key heap-based overflow6.9 Medium
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.9.8 Critical
- No product listedAn issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote...7.3 High
libjxlMageia,jpeg-xlDebian,jpegxlopenEuler +4 more +6 moreHeap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras:...7.3 High- gnu libredwgGNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow6.9 Medium
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities8.0 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass8.6 High
- checkpoint quantum security gatewayHTTP service can incorrectly process malformed HTTP requests5.3 Medium
- checkpoint quantum security gatewayVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero8.1 High
- squirrel-lang squirrelSquirrel Cnut File sqobject.cpp ReadObject heap-based overflow4.8 Medium
- hitachi energy mach hidrawA heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An...4.4 Medium
- mediaarea mediainfolibMediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability7.8 High
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH...9.8 Critical
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the...7.1 High
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in...9.8 Critical
- gnu libredwgGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow4.8 Medium
- gnu libredwgGNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow4.8 Medium
ettercapDebianEttercap GG Dissector ec_gg.c FUNC_DECODER heap-based overflow6.3 Medium- f5 nginx open source, nginx plus, debian linux +15 more +17 moreNGINX ngx_http_rewrite_module vulnerability9.2 Critical
- vifmHeap Buffer Overflow in vifm4.8 Medium
- imagemagickImageMagick: Heap Buffer Over-Write in distributed pixel cache server4.1 Medium
- freebsdHeap overflow in FUSE_LISTXATTR5.5 Medium
- netatalkHeap buffer overflow in CNID daemon comm_rcv()9.9 Critical
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file6.5 Medium
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution9.3 Critical
- google chromeHeap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0...7.5 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote...8.8 High
- mediaarea mediainfolibMediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability7.8 High
- microsoft malware protection engineMicrosoft Defender Remote Code Execution Vulnerability8.1 High
- strukturag libheif, red hat enterprise linux 10 +1 morelibheif has a heap buffer overflow in decode_mask_image()7.1 High
- kitty project kittyKitty has a Heap Buffer Overflow in its Graphics Protocol Handler7.5 High
- f5 nginx javascript, njs +1 moreNGINX JavaScript vulnerability9.2 Critical
- samsung escargotHeap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers....7.8 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions7.5 High
- saitoha libsixellibsixel: integer overflow in encoder7.4 High
- google chromeHeap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168...4.3 Medium
- google chromeHeap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote...4.3 Medium
- google chromeHeap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a...8.8 High
- google chromeHeap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...8.3 High
- google chromeHeap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...8.8 High
- academysoftwarefoundation openimageioOpenImageIO: HEIF Heap overflow8.5 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution7.2 High
- f5 nginx open source, nginx plus, dos +26 more +28 moreNGINX ngx_http_rewrite_module vulnerability9.2 Critical
- amd esxi 8.x and esxi 9.x hosts using amd-pensando dpu productsA heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to...8.8 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreUnauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service7.5 High
- adobe illustrator, illustrator desktop 2025, illustrator desktop 2026 +2 moreIllustrator | Heap-based Buffer Overflow (CWE-122)7.8 High
- Show moreLoading…