CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,335 vulnerabilities with CWE-122
CVE-2019-14901 CRITICAL
Linux Kernel 3.x.x-4.x.x < 4.18.0 - Heap Overflow in Marvell WiFi Chip Driver
CVSS 9.8
CVE-2019-14895 CRITICAL
Linux Kernel 3.x-4.x < 4.18.0 - Heap-based Buffer Overflow in Marvell WiFi Chip Driver
CVSS 9.8
CVE-2019-14896 CRITICAL
Linux Kernel 2.6.32 - Heap-based Buffer Overflow in Marvell WiFi Chip Driver
CVSS 9.8
CVE-2019-14815 HIGH
Linux Kernel 4.10-4.14.146 - Heap-based Buffer Overflow in Marvell WiFi Driver
CVSS 7.8
CVE-2019-18240 CRITICAL
Fuji Electric V-Server < 4.0.6 - Remote Code Execution via Heap-based Buffer Overflow
CVSS 9.8
CVE-2019-5125 HIGH
LEADTOOLS < 20.0.2019.11.19 - Heap-based Buffer Overflow in JPEG2000 Parser
CVSS 7.8
CVE-2019-5030 HIGH
Rainbow PDF Office Server Document Converter V7.0 Pro MR1 - Buffer ...
CVSS 8.8
CVE-2019-15679 CRITICAL
TightVNC 1.3.10 - Heap-based Buffer Overflow in InitialiseRFBConnection
CVSS 9.8
CVE-2019-15678 CRITICAL
TightVNC 1.3.10 - Heap-based Buffer Overflow in rfbServerCutText Handler
CVSS 9.8
CVE-2019-5050 HIGH
NitroPDF 12.12.1.522 - Memory Corruption
CVSS 7.8
CVE-2019-5048 HIGH
NitroPDF 12.12.1.522 - Memory Corruption
CVSS 7.8
CVE-2019-5046 HIGH
NitroPDF 12.12.1.522 - Memory Corruption
CVSS 7.8
CVE-2019-5045 HIGH
NitroPDF 12.12.1.522 - Memory Corruption
CVSS 7.8
CVE-2019-14816 HIGH
Linux Kernel < 5.3 - Heap-based Buffer Overflow in Marvell WiFi Chip Driver
CVSS 7.8
CVE-2019-14814 HIGH
Linux Kernel < 5.3 - Heap-based Buffer Overflow in Marvell WiFi Chip Driver
CVSS 7.8
CVE-2019-5482 CRITICAL
cURL 7.19.4-7.65.3 - Heap-based Buffer Overflow in TFTP Protocol Handler
CVSS 9.8
CVE-2019-13536 HIGH
Delta Electronics TPEditor <1.94 - Buffer Overflow
CVSS 7.8
CVE-2019-5039 HIGH
Openweave-core <4.0.2 - Command Injection
CVSS 8.8
CVE-2019-5058 HIGH
SDL2_image 2.0.4 - Heap-based Buffer Overflow in XCF Image Rendering
CVSS 8.8
CVE-2019-5057 HIGH
SDL2_image 2.0.4 - Heap-based Buffer Overflow in PCX Image Rendering
CVSS 8.8
CVE-2019-10982 HIGH
Delta Electronics CNCSoft ScreenEditor <= 1.00.89 - Heap-based Buffer Overflow via Project File Processing
CVSS 7.8
CVE-2019-3570 CRITICAL
Facebook Hiphop Virtual Machine < 3.30.5 - Out-of-Bounds Write
CVSS 9.8
CVE-2019-10192 HIGH
Redis <3.2.13, <4.0.14, <5.0.4 - Buffer Overflow
CVSS 7.2
CVE-2019-10126 CRITICAL
Linux Kernel 4.2-4.4.185 - Heap-based Buffer Overflow in mwifiex_uap_parse_tail_ies
CVSS 9.8
CVE-2019-6530 HIGH
Panasonic FPWIN Pro < 7.3.0.0 - Heap-based Buffer Overflow via Project File
CVSS 7.8
Details
Vulnerabilities 2,335
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits