CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,136 vulnerabilities with CWE-122
CVE-2023-45318 CRITICAL
Silabs Gecko Software Development Kit - Out-of-Bounds Write
CVSS 10.0
CVE-2023-41276 MEDIUM
QNAP OS - Buffer Overflow
CVSS 5.5
CVE-2023-41275 MEDIUM
QNAP OS - Buffer Overflow
CVSS 5.5
CVE-2023-41273 MEDIUM
QNAP OS - Buffer Overflow
CVSS 5.5
CVE-2023-5841 CRITICAL
Openexr < 3.2.1 - Out-of-Bounds Write
CVSS 9.1
CVE-2023-6779 HIGH
GNU Glibc < 2.39 - Out-of-Bounds Write
CVSS 8.2
CVE-2023-6246 HIGH
glibc <2.36 - Buffer Overflow
CVSS 8.4
CVE-2023-52356 HIGH
Libtiff - Out-of-Bounds Write
CVSS 7.5
CVE-2023-31031 MEDIUM
NVIDIA DGX Station - Buffer Overflow
CVSS 4.2
CVE-2023-48263 HIGH
Bosch Nexo-os < 1500-sp2 - Out-of-Bounds Write
CVSS 8.1
CVE-2023-37297 HIGH
AMI Megarac Sp-x < 12.7 - Out-of-Bounds Write
CVSS 8.3
CVE-2023-37295 HIGH
AMI Megarac Sp-x < 12.7 - Out-of-Bounds Write
CVSS 8.3
CVE-2023-37294 HIGH
AMI Megarac Sp-x < 12.7 - Out-of-Bounds Write
CVSS 8.3
CVE-2023-49123 HIGH
Solid Edge SE2023 <V223.0 Update 10 - Buffer Overflow
CVSS 7.8
CVE-2023-49122 HIGH
Solid Edge SE2023 <V223.0 Update 10 - Buffer Overflow
CVSS 7.8
CVE-2023-49121 HIGH
Solid Edge SE2023 <V223.0 Update 10 - Buffer Overflow
CVSS 7.8
CVE-2023-6992 MEDIUM
Cloudflare Zlib < 2023-11-16 - Out-of-Bounds Write
CVSS 4.0
CVE-2023-47039 HIGH
Perl < 5.32.1 - Out-of-Bounds Write
CVSS 7.8
CVE-2023-7104 MEDIUM
Sqlite < 3.43.0 - Memory Corruption
CVSS 5.5
CVE-2023-7158 HIGH
Micropython < 1.22.0 - Out-of-Bounds Write
CVSS 7.3
CVE-2023-48704 HIGH
ClickHouse - Buffer Overflow
CVSS 7.0
CVE-2023-47118 HIGH
Clickhouse < 23.3.16.7 - Out-of-Bounds Write
CVSS 7.0
CVE-2023-47038 HIGH
Perl < 5.38.0 - Out-of-Bounds Write
CVSS 7.0
CVE-2023-3430 HIGH
Openimageio - Out-of-Bounds Write
CVSS 7.5
CVE-2023-33221 MEDIUM
DESFire - RCE
CVSS 6.8
Details
Vulnerabilities 2,136
Exploit Likelihood High