CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,327 vulnerabilities with CWE-122
CVE-2024-2824 MEDIUM
Matthias-Wandel jhead 3.08 - Buffer Overflow
CVSS 6.3
CVE-2024-1848 HIGH
SOLIDWORKS Desktop Release SOLIDWORKS 2024 SP0 - Heap-based Buffer Overflow in File Reading Procedure
CVSS 7.8
CVE-2024-28231 CRITICAL
eprosima Fast DDS < 2.6.8 - Heap-based Buffer Overflow via DATA Submessage
CVSS 9.6
CVE-2024-28572 MEDIUM
FreeImage 3.19.0 - Heap-based Buffer Overflow via FreeImage_SetTagValue()
CVSS 6.2
CVE-2024-22453 HIGH
Dell PowerEdge Server BIOS - Buffer Overflow
CVSS 7.2
CVE-2024-20755 HIGH
Adobe Bridge < 13.0.6 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2024-20745 HIGH
Premiere Pro < 23.6.4 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2024-26540 HIGH
cimg < 3.3.3 - Heap-based Buffer Overflow via Crafted File in _load_analyze
CVSS 7.8
CVE-2024-26178 HIGH
Windows Kernel - Elevation of Privilege via Heap-based Buffer Overflow
CVSS 7.8
CVE-2024-26166 HIGH
Windows 10 1507-22H2, Windows 11 21H2-23H2, Windows Server 2008-2012 - Remote Code Execution via WDAC OLE DB Provider
CVSS 8.8
CVE-2024-26161 HIGH
Windows 10/11, Server 2008-2022 - RCE via WDAC OLE DB Provider Heap Overflow
CVSS 8.8
CVE-2024-26159 HIGH
Microsoft ODBC Driver - Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-21330 HIGH
Microsoft Azure Automation < 1.8.1-0 - Out-of-Bounds Write
CVSS 7.8
CVE-2024-27209 HIGH
Google Android Heap Buffer Overflow Leading to Local - Privilege Escalation
CVSS 8.4
CVE-2024-22857 CRITICAL
zlog 1.1.0-1.2.17 - Heap-based Buffer Overflow in zlog_rule_new()
CVSS 9.8
CVE-2024-0156 HIGH
Dell Digital Delivery < 5.2.0.0 - Buffer Overflow
CVSS 7.0
CVE-2024-22100 HIGH
MicroDicom DICOM Viewer <2023.3 (Build 9342) - Buffer Overflow
CVSS 7.8
CVE-2024-24246 MEDIUM
qpdf 11.9.0 - Heap-based Buffer Overflow via std::__shared_count()
CVSS 5.5
CVE-2024-25262 HIGH
texlive-bin - Heap-based Buffer Overflow in ttfLoadHDMX Function
CVSS 8.1
CVE-2024-22532 MEDIUM
XNSoft NConvert <7.163 - Buffer Overflow
CVSS 6.5
CVE-2024-1847 HIGH
SOLIDWORKS 2023-2024 - Multiple Memory Corruption Vulnerabilities in File Reading Procedure
CVSS 7.8
CVE-2024-21886 HIGH
Red Hat Enterprise Linux - Heap-based Buffer Overflow in X.Org Server DisableDevice Function
CVSS 7.8
CVE-2024-21885 HIGH
Red Hat Enterprise Linux - Heap-based Buffer Overflow in XISendDeviceHierarchyEvent
CVSS 7.8
CVE-2024-21802 HIGH
llama.cpp - Heap-based Buffer Overflow in GGUF Library Info Processing
CVSS 8.8
CVE-2024-23127 HIGH
Autodesk AutoCAD 2021-2021.1.4 - Heap-based Buffer Overflow via Crafted MODEL/SLDPRT/SLDASM File
CVSS 7.8
Details
Vulnerabilities 2,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits