CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,327 vulnerabilities with CWE-122
CVE-2023-4911 HIGH KEV
Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables)
CVSS 7.8
CVE-2023-5344 HIGH
vim < 9.0.1969 - Heap-based Buffer Overflow
CVSS 7.5
CVE-2023-4264 HIGH
Zephyrproject Zephyr Bluetooth Subsystem - Buffer Overflow
CVSS 7.1
CVE-2023-4504 HIGH
CUPS < 2.4.7 - Heap-based Buffer Overflow via PPD PostScript Document
CVSS 7.0
CVE-2023-32461 MEDIUM
Dell PowerEdge BIOS < 1.5.6 - Authenticated Heap-based Buffer Overflow
CVSS 5.0
CVE-2023-32643 MEDIUM
GLib < 2.75.1 - Heap-based Buffer Overflow in GVariant Deserialization
CVSS 5.3
CVE-2023-38147 HIGH
Windows Miracast Wireless Display - Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2023-38143 HIGH
Windows Common Log File System Driver - Elevation of Privilege via Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-36793 HIGH
Microsoft Visual Studio - Remote Code Execution
CVSS 7.8
CVE-2023-36772 HIGH
3D Builder < 20.0.4.0 - Remote Code Execution
CVSS 7.8
CVE-2023-36771 HIGH
3D Builder < 20.0.4.0 - Remote Code Execution
CVSS 7.8
CVE-2023-36770 HIGH
3D Builder < 20.0.4.0 - Remote Code Execution
CVSS 7.8
CVE-2023-36740 HIGH
3D Viewer < 7.2306.12012.0 - Remote Code Execution
CVSS 7.8
CVE-2023-36739 HIGH
3D Viewer < 7.2307.27042.0 - Remote Code Execution
CVSS 7.8
CVE-2023-38076 HIGH
Siemens JT2Go < 14.3.0.1 - Heap-based Buffer Overflow via WRL File Parsing
CVSS 7.8
CVE-2023-38071 HIGH
Siemens JT2Go < 14.3.0.1 - Heap-based Buffer Overflow via WRL File Parsing
CVSS 7.8
CVE-2023-4781 HIGH
vim < 9.0.1873 - Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-4751 HIGH
vim < 9.0.1331 - Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-4738 HIGH
vim < 9.0.1848 - Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-4682 MEDIUM
gpac < 2.3 - Heap-based Buffer Overflow
CVSS 5.5
CVE-2023-40166 MEDIUM
Notepad++ < 8.5.6 - Heap-based Buffer Overflow in FileManager Language Detection
CVSS 5.5
CVE-2023-40031 HIGH
Notepad++ < 8.5.6 - Heap-based Buffer Overflow in Utf8_16_Read::convert
CVSS 7.8
CVE-2023-4322 CRITICAL
radareorg/radare2 <5.9.0 - Buffer Overflow
CVSS 9.8
CVE-2023-39947 HIGH
eprosima Fast DDS < 2.6.6 - Heap-based Buffer Overflow via PID_PROPERTY_LIST Parameter
CVSS 8.2
CVE-2023-39946 HIGH
eprosima Fast DDS < 2.6.6 - Heap-based Buffer Overflow via PID_PROPERTY_LIST Parameter
CVSS 8.2
Details
Vulnerabilities 2,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits