CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,327 vulnerabilities with CWE-122
CVE-2024-42851 HIGH
exiftags < 1.01 - Heap-based Buffer Overflow via paresetag Function
CVSS 7.8
CVE-2024-43802 MEDIUM
Vim < 9.1.0697 - Heap-based Buffer Overflow in Typeahead Buffer Handling
CVSS 4.5
CVE-2024-43790 MEDIUM
Vim 9.1.0425-9.1.0689 - Heap-based Buffer Overflow via Search Pattern with ASCII NUL Characters
CVSS 4.5
CVE-2024-7973 HIGH
Google Chrome < 128.0.6613.84 - Heap-based Buffer Overflow in PDFium via Crafted PDF File
CVSS 8.8
CVE-2024-7967 HIGH
Google Chrome < 128.0.6613.84 - Heap-based Buffer Overflow in Fonts via Crafted HTML Page
CVSS 8.8
CVE-2024-42438 MEDIUM
Zoom Meeting SDK < 6.1.0 - Authenticated Denial of Service via Buffer Overflow
CVSS 6.5
CVE-2024-42437 MEDIUM
Zoom Meeting SDK < 6.1.0 - Authenticated Denial of Service via Buffer Overflow
CVSS 6.5
CVE-2024-42436 MEDIUM
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers < 6.1.0 - DoS via Buffer Overflow
CVSS 6.5
CVE-2024-39825 HIGH
Zoom Rooms and Workplace < 6.0.0 - Authenticated Heap-based Buffer Overflow
CVSS 8.5
CVE-2024-41853 HIGH
Adobe InDesign < 18.5.3 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2024-41850 HIGH
Adobe InDesign < 18.5.3 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2024-38172 HIGH
Microsoft 365 Apps and Office Long Term Servicing Channel - Remote Code Execution via Heap-based Buffer Overflow
CVSS 7.8
CVE-2024-38170 HIGH
Microsoft 365 Apps and Office Long Term Servicing Channel - Remote Code Execution via Heap-based Buffer Overflow
CVSS 7.1
CVE-2024-38169 HIGH
Microsoft Office Visio - Remote Code Execution via Heap-based Buffer Overflow
CVSS 7.8
CVE-2024-38161 MEDIUM
Windows Mobile Broadband Driver - Remote Code Execution
CVSS 6.8
CVE-2024-38160 CRITICAL
Windows Network Virtualization - Remote Code Execution
CVSS 9.1
CVE-2024-38154 HIGH
Windows Routing and Remote Access Service - Remote Code Execution
CVSS 8.8
CVE-2024-38152 HIGH
Windows OLE - Remote Code Execution
CVSS 7.8
CVE-2024-38142 HIGH
Windows Secure Kernel Mode - Privilege Escalation
CVSS 7.8
CVE-2024-38130 HIGH
Windows Routing and Remote Access Service - Remote Code Execution
CVSS 8.8
CVE-2024-38121 HIGH
Windows Routing and Remote Access Service - Remote Code Execution
CVSS 8.8
CVE-2024-38120 HIGH
Windows Routing and Remote Access Service - Remote Code Execution
CVSS 8.8
CVE-2024-38116 HIGH
Windows IP Routing Management Snapin - Remote Code Execution
CVSS 8.8
CVE-2024-38115 HIGH
Windows IP Routing Management Snapin - Remote Code Execution
CVSS 8.8
CVE-2024-38114 HIGH
Windows IP Routing Management Snapin - Remote Code Execution
CVSS 8.8
Details
Vulnerabilities 2,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits