CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- academysoftwarefoundation openimageioOpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write7.8 High
- zephyrproject zephyrHeap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response body8.2 High
- gl.inet be3600, be6500, be9300 +8 more +10 moreGL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow5.3 Medium
- mediatek mt2735 firmware, mt2737 firmware, mt6880 firmware +5 more +7 moreIn Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could...5.5 Medium
- mediatek, inc. mediatek chipsetIn wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This...8.1 High
- freerdpFreeRDP before 3.29.0 Integer Overflow via Audio Input Channel7.7 High
- freerdpFreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr9.4 Critical
- allinurl goaccessGoAccess: Heap Out-of-Bounds Write in parse_browser()7.1 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...9.6 Critical
- google chromeHeap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a...9.6 Critical
- autel maxicharger ac elite homeAutel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability6.8 Medium
- linux, linux kernel +1 mores390/pkey: Check length in pkey_pckmo handler implementation7.8 High
- xlight ftp server, xlightftpd xlight ftp server +1 moreXlight FTP Server < 3.9.5 Pre-Auth Heap Buffer Overflow via SSH Parser9.3 Critical
- autodesk autocad, advance steel, autocad lt +8 more +10 moreDXF File Parsing Heap-Based Overflow in Autodesk AutoCAD7.8 High
- adobe format pluginsFormat Plugins | Heap-based Buffer Overflow (CWE-122)7.8 High
- freerdpFreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client7.7 High
- apache thriftApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()9.3 Critical
- linux, linux kernel +1 moredrm/hyperv: validate resolution_count and fix WIN8 fallback7.7 High
- ffmpegFFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder8.7 High
- ffmpegFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File8.7 High
- ffmpegFFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter7.7 High
- libssh2libssh2 Heap Buffer Overflow via ETM Cipher Negotiation7.7 High
- fluidsynthFluidSynth: Heap-based buffer overrun for DLS samples8.0 High
- fluidsynthFluidSynth: Heap Buffer Overflow in MIDI Player7.8 High
- gnu coreutilsHeap-based Buffer Overflow in GNU coreutils1.8 Low
- microsoft accountMicrosoft Account Remote Code Execution Vulnerability9.8 Critical
- mz automation libiec61850Stack-based Buffer Overflow in MZ Automation libIEC618509.2 Critical
- libarchivelibarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the...2.5 Low
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreMongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption9.2 Critical
- ffmpegFFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer8.7 High
- nlnet labs unboundPacket of death for DNSCrypt over TCP7.5 High
- hikvision ds-2cd series, ds-2de series +1 moreThere is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow...7.7 High
- code16 sharpSharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability8.9 High
- autel maxicharger single, maxicharger single charger firmware +1 moreAuthenticated Heap Overflow9.4 Critical
- 7-zip7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability7.0 High
- neutrinolabs xrdpxrdp: Channel Data Forwarding Fixed-Size Buffer Overflow8.8 High
- neutrinolabs xrdpxrdp: lib_palette_update Heap Buffer Overflow & RCE9.8 Critical
- libvipsPossible heap-based buffer overflow when decoding TIFF image containing well-crafted tile7.0 High
- libvipsPossible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata6.8 Medium
- proftpdProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly8.7 High
- freerdpFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common9.3 Critical
- linux, linux kernel +1 moreKVM: SEV: Compute the correct max length of the in-GHCB scratch area9.3 Critical
- linux, linux kernel +1 morescsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 Critical
- linux, linux kernel +1 morescsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 Critical
- proftpdProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation7.7 High
- openplc v3 v3, openplcproject openplc v3 +1 moreOpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()8.7 High
- cmusphinx pocketsphinxPocketSphinx: Buffer overflows in language and acoustic model loading code6.9 Medium
- ibm storage protect client, storage protect +1 moreIBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow8.1 High
- Show moreLoading…