CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- freerdpFreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag8.7 High
- freerdpFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7 High
- rti connext professionalHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.9.2 Critical
- f5 nginx open source, nginx plus, dos +14 more +16 moreNGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability9.2 Critical
- google chromeHeap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a...8.8 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker...8.8 High
- leejet stable-diffusion.cppstable-diffusion.cpp has a Heap-based Buffer Overflow7.8 High
- leejet stable-diffusion.cppstable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint files7.8 High
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Heap-based Buffer Overflow (CWE-122)7.8 High
- fusesource jansiHeap buffer overflow in Jansi4.8 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb8.8 High
- libvnc libvncserverlibvncclient Tight decoder has an attacker-controlled heap out-of-bounds write8.8 High
- gpacA heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows...5.5 Medium
- gpacA heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box...5.5 Medium
- gpacA heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of...5.5 Medium
- gpacA heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2...5.5 Medium
- vs revo revouninstallerVS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow8.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreQemu-kvm: heap buffer overflow in virtio-blk scsi request handling6.7 Medium
- squid-cache squidSquid: Memory corruption in cache_digest reply handling5.5 Medium
- google chromeOut of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...8.3 High
- google chromeHeap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...8.3 High
- alanxz rabbitmq-crabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max7.1 High
- imagemagickImageMagick: Heap Buffer Over-Write in SF3 encoder when writing multi-frame image6.2 Medium
- imagemagickImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systems5.9 Medium
- openvpn ovpn-dco-winAn incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2...5.6 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation6.5 Medium
- espressif esp-idfESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth7.1 High
- adobe format pluginsFormat Plugins | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe format pluginsFormat Plugins | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Heap-based Buffer Overflow (CWE-122)7.8 High
- sqlite, siemens ruggedcom crossbow station access controller (sac) +1 moreSQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate8.5 High
- sqlite, siemens ruggedcom crossbow station access controller (sac) +1 moreSQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek6.8 Medium
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft remote desktop client, remote desktop client for windows desktop, windows 10 version 1607 +28 more +30 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreNT OS Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows TCP/IP Elevation of Privilege Vulnerability9.6 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Hyper-V Remote Code Execution Vulnerability8.2 High
- microsoft office ltsc 2024, office 2024 +1 moreMicrosoft Outlook and Word Remote Code Execution Vulnerability8.4 High
- Show moreLoading…