CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Access Remote Code Execution Vulnerability7.5 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Access Remote Code Execution Vulnerability8.8 High
- microsoft office 365 for mac, office ltsc for mac 2021, office ltsc for mac 2024 +3 more +5 moreMicrosoft Office OneNote Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Access Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Access Remote Code Execution Vulnerability8.8 High
- adobe framemaker 2022, framemaker 2026 +1 moreAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemaker 2022, framemaker 2026 +1 moreAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemaker 2022, framemaker 2026 +1 moreAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- commvault cloudMediaAgent Denial of Service8.7 High
- wazuh wazuh-managerWazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder7.1 High
- fatpipe warpNVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow....4.4 Medium
- opens100 project opens100OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow7.1 High
- gnu aspellImportant: aspell security update5.9 Medium
- freerdpFreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion6.0 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length6.1 Medium
- samsung open source rlottieHeap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via...5.5 Medium
- apache software foundation datasketchesApache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch9.8 Critical
- canva affinityThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely...4.9 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eog: arbitrary code execution via heap buffer overflow in png metadata reader5.5 Medium
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write7.8 High
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server Glamor CopyArea Heap Buffer Overflow7.8 High
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server RandR ChangeProviderProperty Heap Buffer Overflow7.8 High
- hp inc sure click enterprise, wolf pro security, wolf pro security edition +1 more +3 moreHP Sure Click Kernel Buffer Overflow6.4 Medium
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Buffer Overflow9.8 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Buffer Overflow8.1 High
- progressive robot ltd hmailserverHeap-based Buffer Overflow in hMailServer6.5 Medium
- progressive robot ltd hmailserverHeap-based Buffer Overflow in hMailServer7.8 High
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server GestureBuildSprite Use-After-Free5.3 Medium
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write7.8 High
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server XFixes Pointer Barrier Event List Buffer Overflow7.8 High
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server XKB ResizeKeyType Numeric Truncation7.8 High
- x.org xwayland, the xorg project xorg-x11-server +1 moreX.Org Server GLX RenderLarge Heap Buffer Overflow8.5 High
- brocade fabric os, broadcom fabric operating system +1 moreWhen Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the...8.5 High
mingUbuntulibming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A...6.5 Medium- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreCyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients7.5 High
- cisco nx-os software, unified computing system (managed) +1 moreCisco NX-OS Software NX-API Remote Code Execution Vulnerability9.8 Critical
- imagemagickImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash5.3 Medium
- imagemagickImageMagick: Heap Buffer Over-Write in EXR decoder5.3 Medium
- xnview classicXnView Classic FLI File heap-based overflow5.3 Medium
- google chromeBuffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who...8.3 High
- google chromeBuffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who...8.3 High
- microsoft lrzszlrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname6.1 Medium
- gnu aspellHeap Buffer Overflow in GNU Aspell's prezip utility1.8 Low
- google chromeBuffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...8.8 High
- apache software foundation thriftApache Thrift: C++ THttpTransport grows its line buffer without bound9.2 Critical
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)9.2 Critical
- Show moreLoading…