CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
gpacUbuntuA heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4...5.5 Medium- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Outlook Remote Code Execution Vulnerability7.5 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- tatsh bincookiebincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file7.8 High
- wavlink wn530hg4bWavlink WN530HG4B api.cgi heap-based overflow10.0 Critical
- hewlett packard enterprise hpe nonstop posix user threadsHPE NonStop Posix User Threads - Heap buffer overflow vulnerability6.6 Medium
- hewlett packard enterprise hpe nonstop debug utilitiesHPE NonStop Debug Utilities - Heap buffer overflow vulnerability7.1 High
- hewlett packard enterprise hpe nonstop inspect subsystemHPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability7.1 High
- hewlett packard enterprise hpe nonstop ocaxHPE NonStop OCAX - Heap buffer overflow vulnerability7.1 High
- hewlett packard enterprise hpe nonstop ndsrestHPE NonStop NDSREST - Heap buffer overflow vulnerability7.1 High
- freebsdRemotely triggerable buffer overflow in tcp_rack9.1 Critical
- hewlett packard enterprise hpe nonstop tns/x native inspectHPE NonStop TNS/X Native Inspect - Execution flow vulnerability7.1 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding6.1 Medium
- automattic mongooseMongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)8.8 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation8.6 High
- juniper networks junos osJunos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled9.3 Critical
- juniper networks junos osJunos OS: A crafted OVSDB message crashes vgd and allows remote code execution8.7 High
- f5 nginx open source, nginx plus +1 moreNGINX map directive and regex matching vulnerability9.2 Critical
- f5 nginx open source, nginx plus +1 moreNGINX ngx_http_core_module vulnerability9.2 Critical
- hewlett packard enterprise hpe nonstop hpjmeterHPE NonStop Hpjmeter - Buffer overflow vulnerability2.0 Low
- google chromeBuffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeBuffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote...9.6 Critical
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +10 more +12 moreSQL Server Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +10 more +12 moreMicrosoft SQL Server Remote Code Execution Vulnerability6.7 Medium
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +9 more +11 moreMicrosoft SQL Server Elevation of Privilege Vulnerability6.4 Medium
- microsoft sql server 2019 (gdr), sql server 2019 for x64-based systems (cu32), sql server 2022 (gdr) +6 more +8 moreMicrosoft SQL Server Elevation of Privilege Vulnerability7.0 High
- microsoft sql server 2019 (gdr), sql server 2019 for x64-based systems (cu32), sql server 2022 (gdr) +6 more +8 moreMicrosoft SQL Server Elevation of Privilege Vulnerability7.0 High
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability8.5 High
- microsoft sql server 2022 (gdr), sql server 2022 for x64-based systems (cu27), sql server 2025 cu10 +4 more +6 moreMicrosoft SQL Server Remote Code Execution Vulnerability6.6 Medium
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability6.7 Medium
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +9 more +11 moreMicrosoft SQL Server Elevation of Privilege Vulnerability8.5 High
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability8.5 High
- adobe photoshopPhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe photoshopPhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- Show moreLoading…