CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Program Compatibility Assistant Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Remote Code Execution Vulnerability6.8 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability4.9 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability9.8 Critical
- microsoft sql server 2025 (cu8), sql server 2025 for x64-based systems (gdr), sql server 2025 +2 moreMicrosoft SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +3 more +5 moreMicrosoft SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +10 more +12 more.NET and Visual Studio Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability8.8 High
- commvault, commvault cloud +1 moreCommServe Denial of Service8.7 High
- No product listedA heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth...7.5 High
- gnome libxml2In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of...6.9 Medium
- teluu pjsip, pjsip pjproject +1 morePJSIP: Heap overflow in the HTTP client8.3 High
- ibm iIBM i is Affected By Buffer Overflow Vulnerability []6.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +13 more +15 moreCorosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly7.5 High
- adobe substance 3d samplerSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)7.8 High
- f5 nginx javascriptNGINX ngx_http_js_module vulnerablility9.2 Critical
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: afp: heap-based buffer overflow in dsi read path6.5 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreGvfs: sftp: heap-based buffer overflow in read_reply()8.8 High
- erlang otpA Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer8.2 High
- google androidIn gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic...8.4 High
- google androidIn Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This...8.0 High
- google androidIn gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap...7.8 High
- google androidIn ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a...7.8 High
- google androidIn parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer...7.8 High
- google androidIn rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap...8.8 High
- google androidIn read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer...7.8 High
- google androidIn a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out...7.8 High
- google androidIn p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due...8.0 High
- google androidIn dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This...8.8 High
- mediatek mt2718 firmware, mt6580 firmware, mt6739 firmware +51 more +53 moreIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead...8.4 High
- mediatek mt2718 firmware, mt6580 firmware, mt6739 firmware +51 more +53 moreIn vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead...8.4 High
- google androidIn Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This...8.8 High
flvmetaDebianFLVMeta AMF String Processing amf.c amf_string_new heap-based overflow5.3 Medium- open asset import library assimpOpen Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow4.8 Medium
- openndsA heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an...7.1 High
- watchguard fireware osFireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service6.9 Medium
- adobe substance 3d sampler, substance 3d painter +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)7.8 High
- red hat ceph storage 4, ceph storage 6, ceph storage 7 +8 more +10 moreLibtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough6.1 Medium
ffmpegDebian,ffmpeg-4openSUSE,ffmpeg-7openSUSE +3 more +5 moreA heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git...7.5 High- the gnu c library glibcBuffer overflow in strfmon and strfmon_l right-justification padding7.7 High
- gnome diaDia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index7.8 High
- ubiquiti inc edgemax edgeswitchA malicious actor with access to an adjacent network could exploit a Buffer Overflow...8.8 High
- freebsdppp(8): missing length validation in mp_SetEnddisc()7.8 High
- freebsdppp(8): incorrect length calculation in mp_Enddisc()8.8 High
u-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists...9.8 Critical- google chromeBuffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeBuffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- Show moreLoading…