CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,137 vulnerabilities with CWE-122
CVE-2018-14653 HIGH
Gluster <4.1.4, 3.12 - Buffer Overflow
CVSS 8.8
CVE-2018-16839 MEDIUM
Curl <7.61.1 - Buffer Overflow
CVSS 4.3
CVE-2018-14794 CRITICAL
Fuji Electric Alpha5 Smart Loader <3.7 - Buffer Overflow
CVSS 9.8
CVE-2018-14813 CRITICAL
Fuji Electric V-Server <4.0.3.0 - Buffer Overflow
CVSS 9.8
CVE-2018-10606 HIGH
WECON LeviStudio <1.8.44 - Buffer Overflow
CVSS 8.8
CVE-2018-14821 HIGH
Rockwell Automation RSLinx Classic <4.00.01 - DoS
CVSS 7.5
CVE-2018-10893 HIGH
Spice - Integer Overflow
CVSS 7.6
CVE-2018-14618 HIGH
curl <7.61.1 - Buffer Overflow
CVSS 7.5
CVE-2018-14290 HIGH
Foxit Reader 9.0.1.5096 - RCE
CVSS 8.8
CVE-2018-1056 HIGH
Advancemame Advancecomp < 2.1 - Heap Buffer Overflow
CVSS 7.8
CVE-2018-3858 HIGH
Acdsystems Canvas Draw - Out-of-Bounds Write
CVSS 7.8
CVE-2018-3857 HIGH
Acdsystems Canvas Draw - Out-of-Bounds Write
CVSS 7.8
CVE-2018-10840 MEDIUM
Linux Kernel - Out-of-Bounds Write
CVSS 6.6
CVE-2018-1120 LOW
Linux kernel <4.17 - DoS
CVSS 2.8
CVE-2018-10617 CRITICAL
Deltaww Delta Industrial Automation Dopsoft < 4.00.04 - Memory Corruption
CVSS 9.8
CVE-2018-4833 HIGH
Siemens Rfid 181-eip Firmware < 5.2.3 - Heap Buffer Overflow
CVSS 8.8
CVE-2018-8871 CRITICAL
Delta Electronics Automation TPEditor <1.89 - Buffer Overflow
CVSS 9.8
CVE-2018-1123 LOW
procps-ng <3.3.15 - DoS
CVSS 3.9
CVE-2018-1124 HIGH
procps-ng <3.3.15 - Privilege Escalation
CVSS 7.8
CVE-2018-9974 HIGH
Foxitsoftware Foxit Reader < 9.0.1.1049 - Memory Corruption
CVSS 8.8
CVE-2018-9949 HIGH
Foxitsoftware Foxit Reader < 9.0.1.1049 - Memory Corruption
CVSS 8.8
CVE-2018-9947 HIGH
Foxitsoftware Foxit Reader < 9.0.1.1049 - Memory Corruption
CVSS 8.8
CVE-2018-10488 HIGH
Foxit Reader 9.0.0.29935 - RCE
CVSS 8.8
CVE-2018-8845 CRITICAL
Advantech WebAccess <8.3.1 - Buffer Overflow
CVSS 9.8
CVE-2018-1089 HIGH
Fedoraproject 389 Directory Server < 1.3.6.15 - Memory Corruption
CVSS 7.5
Details
Vulnerabilities 2,137
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits