CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreHTTP.sys Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Kernel Remote Code Execution Vulnerability9.8 Critical
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Word Information Disclosure Vulnerability3.3 Low
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows DNS Client Elevation of Privilege Vulnerability7.0 High
- nvidia dali, data loading library +1 moreNVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based...7.3 High
- freeswitchFreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read9.8 Critical
- freeswitchFreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing9.1 Critical
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)3.3 Low
- huawei harmonyosOut-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this...5.3 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)8.3 High
- No product listedAn issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). There is a...7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_xml2enc heap overflow7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_proxy_html buffer overflow7.5 High
- apache http serverApache HTTP Server: ProxyPassReverseCookieMap buffer overflow7.5 High
- imagination technologies graphics ddkGPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical7.5 High
- google chromeOut of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an...6.5 Medium
- google chromeInteger overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...8.3 High
- google chromeHeap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...7.5 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...8.3 High
- linux, linux kernel +1 morepstore/ram: fix buffer overflow in persistent_ram_save_old()7.8 High
- open asset import library assimpAssimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow4.8 Medium
- open asset import library assimpAssimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow4.8 Medium
- open asset import library assimpAssimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow4.8 Medium
- mediatek mt6890 firmware, mt7615 firmware, mt7915 firmware +7 more +9 moreIn wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This...8.0 High
- google androidIn RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow....8.8 High
- google androidIn Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead...8.8 High
- google androidIn RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer...4.3 Medium
- google androidIn Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow....7.8 High
- google androidIn multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due...8.0 High
gpacDebianA heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2...5.5 Medium- open asset import library assimpAssimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow4.8 Medium
- offis dcmtkOFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow5.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS8.8 High
- openscOpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c1.0 Low
- tirr-c jxl-grid, jxl-oxide +1 morejxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms7.3 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote...8.8 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...8.3 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a...8.3 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...8.3 High
- Show moreLoading…