CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- wireshark foundation ciscodump, wireshark +1 moreHeap-based Buffer Overflow in ciscodump5.5 Medium
- x libxfont, x.org libxfont2 +1 morelibXfont2 computeProps Property Buffer Heap Buffer Overflow8.5 High
- x libxfont, x.org libxfont2 +1 morelibXfont2 PCF Font Parsing Heap Buffer Overflow8.5 High
- x libxfont, x.org libxfont2 +1 morelibXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow8.5 High
- fluidsynthFluidSynth: Heap-based buffer overrun9.8 Critical
- x.org xorg-server, xwayland, x server +2 morexorg-server / xwayland glamor font atlas Heap Buffer Overflow8.5 High
- gnu wgetGNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c6.0 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn5.3 Medium
- 389ds 389-ds-base, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +21 more +23 more389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind8.8 High
gpacDebianGPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow4.8 Medium- radare radare2radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow4.8 Medium
- php, debian linux +1 moreext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD5.6 Medium
- open asset import library assimpOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow4.8 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreGimp: gimp: heap buffer overflow in read_channel_data()7.3 High
- linux kernel, linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 moreipv6: account for fraggap on the paged allocation path7.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker...8.3 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote...8.8 High
- open asset import library assimpOpen Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflow4.8 Medium
- mediatek, inc. mediatek chipsetIn Telephony, there is a possible memory corruption due to a heap buffer overflow. This could...6.7 Medium
- google chromeHeap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...8.8 High
- google chromeInsufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote...5.8 Medium
- google chromeInteger overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker...8.8 High
- google chromeInappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote...9.6 Critical
- ruby jsonRuby JSON: JSON generator heap buffer overflow when streaming to an IO3.7 Low
- seladb pcapplusplusseladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow6.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image7.3 High
- seladb pcapplusplusseladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow6.3 Medium
- seladb pcapplusplusseladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow6.3 Medium
- seladb pcapplusplusseladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow6.3 Medium
- No product listedA heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870...7.5 High
- No product listedA heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of...7.5 High
- strukturag libde265libde265: SAO sequential filter heap buffer overflow via signed integer overflow7.4 High
- No product listedA heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to...6.5 Medium
- rtklibRTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count7.1 High
- dest-unreach socatsocat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser9.2 Critical
- drolsky list::someutils::xsList::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function7.5 High
- linux, linux kernel +1 moreBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 High
- apache software foundation kvrocksApache Kvrocks: Stack buffer overflow in Lua bit.tohex()10.0 Critical
- nlnet labs nsdHeap overflow and crash with crafted SVCB RR8.7 High
- rsyslogRsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling8.2 High
- gpacGPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is...5.5 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies5.9 Medium
- offis dcmtkOFFIS DCMTK ofxml.cc parseFile heap-based overflow5.3 Medium
- ohler55 ojOj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent2.1 Low
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreLibaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode7.6 High
- llvm llvm-projectllvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow4.8 Medium
- freerdpFreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch8.7 High
- Show moreLoading…