CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,327 vulnerabilities with CWE-122
CVE-2023-38212 HIGH
Adobe Dimension < 3.4.9 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2023-2905 HIGH
Cesanta Mongoose 7.10 - Heap-based Buffer Overflow in MQTT CMD_PUBLISH Message Parsing
CVSS 8.8
CVE-2023-38170 HIGH
HEVC Video Extensions < 2.0.61933.0 - Remote Code Execution
CVSS 7.8
CVE-2023-38154 HIGH
Windows 10 1809 and Windows Server 2019 - Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-36896 HIGH
Microsoft 365 Apps and Office - Remote Code Execution via Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-36865 HIGH
Microsoft 365 Apps and Office - Remote Code Execution via Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-36532 MEDIUM
Zoom Rooms < 5.14.5 - Unauthenticated Denial of Service via Buffer Overflow
CVSS 5.9
CVE-2023-3180 MEDIUM
QEMU < 8.1.0 - Heap-based Buffer Overflow in virtio_crypto_sym_op_helper
CVSS 6.0
CVE-2023-4016 LOW
procps 3.3.0-4.0.2 - Heap-based Buffer Overflow via ps Utility
CVSS 2.5
CVE-2023-21406 HIGH
AXIS A1001 Firmware < 1.65.4 - Heap-Based Buffer Overflow via OSDP Message Handling
CVSS 7.1
CVE-2023-3463 MEDIUM
GE Digital CIMPLICITY - Heap-based Buffer Overflow via Untrusted Document Input
CVSS 6.6
CVE-2023-24474 HIGH
Honeywell Experion Server 501.1-501.6hf8 - Denial of Service via Heap Overflow
CVSS 7.5
CVE-2023-2763 HIGH
SOLIDWORKS Desktop 2021-2023 - Use-After-Free and Heap-based Buffer Overflow in DWG/DXF File Parsing
CVSS 7.8
CVE-2023-35374 HIGH
Paint 3D < 6.2305.16087.0 - Remote Code Execution
CVSS 7.8
CVE-2023-35363 HIGH
Windows Kernel - Elevation of Privilege via Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-35350 HIGH
Windows Server Active Directory Certificate Services - Remote Code Execution via Heap-based Buffer Overflow
CVSS 7.2
CVE-2023-35337 HIGH
Windows 10/11 & Server 2022 Elevation of Privilege via Win32k Heap Overflow
CVSS 7.8
CVE-2023-35305 HIGH
Windows 10/11, Server 2016/2019/2022 Elevation of Privilege via Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-35304 HIGH
Windows Kernel - Elevation of Privilege via Heap-based Buffer Overflow
CVSS 7.8
CVE-2023-35302 HIGH
Windows 10 1507-22H2 and Windows 11 21H2-22H2 - Remote Code Execution via PostScript and PCL6 Printer Driver
CVSS 8.8
CVE-2023-33152 HIGH
Microsoft 365 Apps - Remote Code Execution via ActiveX Heap-based Buffer Overflow
CVSS 7.0
CVE-2023-32083 MEDIUM
Windows Server 2016, 2019, and 2022 - Heap-based Buffer Overflow
CVSS 6.5
CVE-2023-32047 HIGH
Paint 3D < 6.2305.16087.0 - Remote Code Execution
CVSS 7.8
CVE-2023-36824 HIGH
Redis 7.0.0-7.0.11 - Authenticated Heap Overflow via COMMAND GETKEYS
CVSS 7.4
CVE-2023-37247 HIGH
Tecnomatix Plant Simulation V2201 < V2201.0008 and V2302 < V2302.0002 - Heap-based Buffer Overflow via PAR File Parsing
CVSS 7.8
Details
Vulnerabilities 2,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits