CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2024-3207 MEDIUM
Ermig1979 Simd < 6.0.134 - Heap Buffer Overflow
CVSS 5.5
CVE-2024-3204 HIGH
C-blosc2 < 2.13.2 - Heap Buffer Overflow
CVSS 7.3
CVE-2024-3203 HIGH
C-blosc2 < 2.13.2 - Heap Buffer Overflow
CVSS 7.3
CVE-2024-30806 MEDIUM
Axiosys Bento4 - Heap Buffer Overflow
CVSS 6.5
CVE-2024-3024 MEDIUM
Broadcom Tcpreplay < 4.4.4 - Out-of-Bounds Write
CVSS 5.3
CVE-2024-20259 HIGH
Cisco IOS XE - DoS
CVSS 8.6
CVE-2024-25390 HIGH
RT-Thread <5.0.2 - Buffer Overflow
CVSS 8.4
CVE-2024-24335 HIGH
Rt-thread < 5.0.2 - Heap Buffer Overflow
CVSS 8.4
CVE-2024-24334 HIGH
Rt-thread < 5.0.2 - Heap Buffer Overflow
CVSS 8.4
CVE-2024-2212 HIGH
Eclipse ThreadX <6.4.0 - Buffer Overflow
CVSS 7.3
CVE-2024-21913 HIGH
Rockwellautomation Arena < 16.20.03 - Out-of-Bounds Write
CVSS 7.8
CVE-2024-2824 MEDIUM
Matthias-Wandel jhead 3.08 - Buffer Overflow
CVSS 6.3
CVE-2024-1848 HIGH
SOLIDWORKS Desktop <2024 - RCE
CVSS 7.8
CVE-2024-28231 CRITICAL
Eprosima Fast Dds < 2.6.8 - Out-of-Bounds Write
CVSS 9.6
CVE-2024-28572 MEDIUM
Freeimage - Heap Buffer Overflow
CVSS 6.2
CVE-2024-22453 HIGH
Dell PowerEdge Server BIOS - Buffer Overflow
CVSS 7.2
CVE-2024-20755 HIGH
Bridge <14.0.1 - RCE
CVSS 7.8
CVE-2024-20745 HIGH
Premiere Pro <24.1, 23.6.2 - RCE
CVSS 7.8
CVE-2024-26540 HIGH
Cimg < 3.3.3 - Heap Buffer Overflow
CVSS 7.8
CVE-2024-26178 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20526 - Heap Buffer Overflow
CVSS 7.8
CVE-2024-26166 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20526 - Heap Buffer Overflow
CVSS 8.8
CVE-2024-26161 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20596 - Heap Buffer Overflow
CVSS 8.8
CVE-2024-26159 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20596 - Heap Buffer Overflow
CVSS 8.8
CVE-2024-21330 HIGH
Microsoft Azure Automation < 1.8.1-0 - Out-of-Bounds Write
CVSS 7.8
CVE-2024-27209 HIGH
Google Android Heap Buffer Overflow Leading to Local - Privilege Escalation
CVSS 8.4
Details
Vulnerabilities 2,135
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits