CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,136 vulnerabilities with CWE-122
CVE-2023-23400 HIGH
Microsoft Windows Server 2012 - Heap Buffer Overflow
CVSS 7.2
CVE-2023-1170 MEDIUM
Vim < 9.0.1376 - Heap Buffer Overflow
CVSS 6.6
CVE-2023-1010 MEDIUM
Vox2png - Heap Buffer Overflow
CVSS 5.3
CVE-2023-22236 HIGH
Adobe Animate <22.0.8-23.0.0 - RCE
CVSS 7.8
CVE-2023-0866 HIGH
Gpac < 2.2.0 - Heap Buffer Overflow
CVSS 7.8
CVE-2023-23782 HIGH
Fortinet Fortiweb < 6.2.7 - Out-of-Bounds Write
CVSS 7.8
CVE-2023-0841 MEDIUM
Gpac - Out-of-Bounds Write
CVSS 6.3
CVE-2023-23381 HIGH
Microsoft Visual Studio 2017 < 15.9.52 - Heap Buffer Overflow
CVSS 7.8
CVE-2023-23390 HIGH
Microsoft 3D Builder < 20.0.2.0 - Heap Buffer Overflow
CVSS 7.8
CVE-2023-23378 HIGH
Microsoft Print 3D < 3.3.791 - Heap Buffer Overflow
CVSS 7.8
CVE-2023-23377 HIGH
Microsoft 3D Builder < 20.0.2.0 - Heap Buffer Overflow
CVSS 7.8
CVE-2023-23376 HIGH KEV
Microsoft Windows 10 1507 < 10.0.10240.19747 - Out-of-Bounds Write
CVSS 7.8
CVE-2023-21812 HIGH
Windows Common Log File System Driver - Privilege Escalation
CVSS 7.8
CVE-2023-21804 HIGH
Windows Graphics Component - Privilege Escalation
CVSS 7.8
CVE-2023-21799 HIGH
Microsoft WDAC OLE DB provider for SQL Server - RCE
CVSS 8.8
CVE-2023-21695 HIGH
Microsoft PEAP - RCE
CVSS 7.5
CVE-2023-21694 MEDIUM
Windows Fax Service - RCE
CVSS 6.8
CVE-2023-21692 CRITICAL
Microsoft PEAP - RCE
CVSS 9.8
CVE-2023-21690 CRITICAL
Microsoft PEAP - RCE
CVSS 9.8
CVE-2023-21689 CRITICAL
Microsoft PEAP - RCE
CVSS 9.8
CVE-2023-21528 HIGH
Microsoft SQL Server - RCE
CVSS 7.8
CVE-2023-24551 HIGH
Solid Edge <V222.0MP12, <V223.0Update2 - Code Injection
CVSS 7.8
CVE-2023-24550 HIGH
Solid Edge <V222.0MP12-V223.0Update2 - Code Injection
CVSS 7.8
CVE-2023-0819 HIGH
Gpac < 2.3.0-dev - Out-of-Bounds Write
CVSS 7.8
CVE-2023-0760 HIGH
Gpac < 2.2.0 - Out-of-Bounds Write
CVSS 7.8
Details
Vulnerabilities 2,136
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits