CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- xdg xdgmime, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +22 more +24 moreXdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c7.1 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Heap-based Buffer Overflow (CWE-122)7.8 High
- wazuhWazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message6.5 Medium
- wazuhWazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)4.7 Medium
- wazuhWazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing7.5 High
- illumos illumos-gate, mnx smartos, omnios +2 moreSCTP needs to better-check INIT ACK chunk parameters9.1 Critical
- illumos illumos-gate, mnx smartos, omnios +2 moreTOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption5.8 Medium
- f5 nginx open source, nginx plus, nginx gateway fabric +2 more +4 moreNGINX Map directive and Regex matching vulnerability9.2 Critical
- tuxera ntfs-3gCVE-2026-56135 affecting package ntfs-3g for versions less than 2022.10.3-47.4 High
- tuxera ntfs-3gCVE-2026-46572 affecting package ntfs-3g for versions less than 2022.10.3-47.4 High
- tuxera ntfs-3gCVE-2026-46570 affecting package ntfs-3g for versions less than 2022.10.3-58.1 High
- tuxera ntfs-3gCVE-2026-46569 affecting package ntfs-3g for versions less than 2022.10.3-57.7 High
- tuxera ntfs-3gCVE-2026-42618 affecting package ntfs-3g for versions less than 2022.10.3-57.1 High
- tuxera ntfs-3gCVE-2026-42617 affecting package ntfs-3g 2022.10.3-57.1 High
- tuxera ntfs-3gCVE-2026-42616 affecting package ntfs-3g for versions less than 2022.10.3-57.8 High
- imagemagickImageMagick before 7.1.2-26 Heap Buffer Over-Write via X111.0 Low
- busyboxA heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers...2.9 Low
- busyboxA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to...5.1 Medium
- adobe bridgeBridge | Heap-based Buffer Overflow (CWE-122)7.8 High
- nvidia tensorrtNVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap...7.8 High
- nvidia tensorrtNVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer...7.8 High
- google chromeHeap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a...8.8 High
- adobe premiere, premiere pro +1 morePremiere Pro | Heap-based Buffer Overflow (CWE-122)7.8 High
- nvidia tensorrt-llmNVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an...7.5 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Input Method Editor (IME) Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Network File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NFS Server Elevation of Privilege Vulnerability8.8 High
- microsoft terminal, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Terminal Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreDHCP Server Service Remote Code Execution Vulnerability9.8 Critical
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +5 more +7 moreMicrosoft OneNote Remote Code Execution Vulnerability7.8 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- Show moreLoading…