CWE-122: Heap-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the heap.
Also known as Heap Overflow, Heap Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMissing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.3 Critical
- google chromeImproper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...4.3 Medium
- tanium endpoint configuration toolset solution, index-cx +1 moreTanium addressed a heap-based buffer overflow vulnerability in Index.7.8 High
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Possible RED T.140 Heap Buffer Overflow2.3 Low
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)7.7 High
- watchguard fireware osFireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution9.2 Critical
- watchguard fireware osFireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution9.2 Critical
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreHeap-based Buffer Overflow Vulnerability in HiRDB9.8 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager +1 moreHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 Critical
- hitachi jp1/automatic job management system 3 - managerHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreHeap-based Buffer Overflow Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/baseHeap-based Buffer Overflow Vulnerability in JP1/Base9.8 Critical
- ubiquiti inc airmax m, ltu ptmp, ltu ptp +1 more +3 moreA malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow...8.8 High
- apple ipados, macos, tvos +4 more +6 moreA heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26...7.5 High
- nxp mcuxsdk-middleware-usbNXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers7.0 High
libimobiledeviceDebianlibimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow5.3 MediumlibimobiledeviceDebianlibimobiledevice AFC afc.c heap-based overflow5.3 Medium- gnome libgsfGNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow5.3 Medium
- imagemagickImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate4.8 Medium
- No product listedAiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header...9.8 Critical
- nomachineNoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamerGStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- ntpsecHeap-based Buffer Overflow in ntpsec6.4 Medium
- code16 sharpSharp before 0.35.4 RCE via bundled libheif AVIF decoding8.9 High
- freerdpFreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format8.7 High
gpacUbuntuA heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core...5.5 Medium- google chromeImproper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed...8.8 High
- google chromeMemory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- totolinkA heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R...9.1 Critical
- librdf raptor rdf syntax libraryRaptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag7.1 High
- advantech adam-3600A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve...7.5 High
- python pillowPillow: Heap buffer overflow in ImagingJpegDecode9.2 Critical
- python pillowPillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution9.2 Critical
- python pillowPillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)6.5 Medium
- python pillowPillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO9.2 Critical
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 moreIBM MQ Buffer Overflow8.8 High
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 moreIBM MQ Buffer Overflow8.8 High
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 moreIBM MQ Heap-based Buffer Overflow5.4 Medium
- nkoriyama aribb24libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflow via parse_data_unit_statement_body6.9 Medium
- opengauss-serverHLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写8.1 High
gpacUbuntuA heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of...5.5 Medium- grunfink snac2snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer()...8.7 High
- adulau ssldumpssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting6.8 Medium
- freerdpFreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser7.0 High
- freerdpFreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v37.0 High
- x.org libxilibXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow7.5 High
- x.org libxilibXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow7.5 High
- Show moreLoading…