CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Access Connection Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Remote Access Connection Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kerberos Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Device Association Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Message Queuing Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Storage Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows MIDI Service Module Elevation of Privileges Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +12 more +14 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Desktop Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Hyper-V Information Disclosure Vulnerability5.0 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Display Enhancement Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Imaging Component Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability7.0 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Heap-based Buffer Overflow (CWE-122)8.1 High
- intel open vklHeap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL)...6.9 Medium
- vimVim: Heap Buffer Overflow when Loading a Spell File8.5 High
- freerdpFreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`8.3 High
- eradman entrHeap-based buffer overflow in entr4.8 Medium
- linuxnet/mlx5: Fix MCIA register buffer overflow on 32 dword reads7.1 High
- mz automation libiec61850MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflow4.8 Medium
- sean barrett (nothings) nothings stbThe nothings stb TrueType library contains a heap buffer overflow vulnerability7.1 High
- mz automation libiec61850MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreP11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems6.2 Medium
- google chromeHeap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who...7.5 High
- google chromeHeap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote...8.3 High
- ggml llama.cppllama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp8.5 High
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: Heap buffer overflow in APR redis client7.5 High
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: Heap buffer overflow in APR memcached client7.5 High
- libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont29.5 Critical
- No product listedA heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU...9.8 Critical
- No product listedBuffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial...7.5 High
- keysight ixchariotKeysight IxChariot Endpoint heap-based buffer overflow9.3 Critical
- o6 open62541o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow4.8 Medium
open62541Debianopen62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the...7.5 High- academysoftwarefoundation openimageioOpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write7.6 High
- Show moreLoading…