CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,271 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 40 of 66
- CVE-2024-8587HIGHCVSS 7.8EG 7.82024-10-29
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or exe…
- CVE-2024-47964HIGHCVSS 7.8EG 7.82024-10-10
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerabi…
- CVE-2024-45143HIGHCVSS 7.8EG 7.82024-10-09
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…
- CVE-2024-45139HIGHCVSS 7.8EG 7.82024-10-09
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…
- CVE-2024-47417HIGHCVSS 7.8EG 7.82024-10-09
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
- CVE-2024-43560HIGHCVSS 7.8EG 7.82024-10-08
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
- CVE-2024-43528HIGHCVSS 7.8EG 7.82024-10-08
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2024-43527HIGHCVSS 7.8EG 7.82024-10-08
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-38261HIGHCVSS 7.8EG 7.82024-10-08
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-41981HIGHCVSS 7.8EG 7.82024-10-08
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing spe…
- CVE-2024-46264HIGHCVSS 7.8EG 7.82024-10-01
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.
- CVE-2024-7674HIGHCVSS 7.8EG 7.82024-09-30
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of…
- CVE-2024-7673HIGHCVSS 7.8EG 7.82024-09-30
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of t…
- CVE-2024-43756HIGHCVSS 7.8EG 7.82024-09-13
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…
- CVE-2024-39380HIGHCVSS 7.8EG 7.82024-09-13
After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…
- CVE-2024-38242HIGHCVSS 7.8EG 7.82024-09-10
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- CVE-2024-38238HIGHCVSS 7.8EG 7.82024-09-10
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- CVE-2024-38237HIGHCVSS 7.8EG 7.82024-09-10
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- CVE-2024-41853HIGHCVSS 7.8EG 7.82024-08-14
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2024-41850HIGHCVSS 7.8EG 7.82024-08-14
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2024-38172HIGHCVSS 7.8EG 7.82024-08-13
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2024-38169HIGHCVSS 7.8EG 7.82024-08-13
Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2024-38152HIGHCVSS 7.8EG 7.82024-08-13
Windows OLE Remote Code Execution Vulnerability
- CVE-2024-38142HIGHCVSS 7.8EG 7.82024-08-13
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2024-7546HIGHCVSS 7.8EG 7.82024-08-06
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…
- CVE-2024-7545HIGHCVSS 7.8EG 7.82024-08-06
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…
- CVE-2024-7544HIGHCVSS 7.8EG 7.82024-08-06
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…
- CVE-2024-7543HIGHCVSS 7.8EG 7.82024-08-06
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute co…
- CVE-2024-39392HIGHCVSS 7.8EG 7.82024-08-02
InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2024-20785HIGHCVSS 7.8EG 7.82024-07-09
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2024-20783HIGHCVSS 7.8EG 7.82024-07-09
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2024-20781HIGHCVSS 7.8EG 7.82024-07-09
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2024-38079HIGHCVSS 7.8EG 7.82024-07-09
Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2024-38054HIGHCVSS 7.8EG 7.82024-07-09
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- CVE-2024-38051HIGHCVSS 7.8EG 7.82024-07-09
Windows Graphics Component Remote Code Execution Vulnerability
- CVE-2024-23155HIGHCVSS 7.8EG 7.82024-06-25
A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrar…
- CVE-2024-23154HIGHCVSS 7.8EG 7.82024-06-25
A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute …
- CVE-2024-30095HIGHCVSS 7.8EG 7.82024-06-11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30094HIGHCVSS 7.8EG 7.82024-06-11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30091HIGHCVSS 7.8EG 7.82024-06-11
Win32k Elevation of Privilege Vulnerability
- CVE-2024-30085HIGHCVSS 7.8EG 7.82024-06-11
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2024-5301HIGHCVSS 7.8EG 7.82024-06-06
Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is require…
- CVE-2024-22058HIGHCVSS 7.8EG 7.82024-05-31
A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in Ivanti EPM 2021.1 and older.
- CVE-2024-30288HIGHCVSS 7.8EG 7.82024-05-16
Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…
- CVE-2024-30294HIGHCVSS 7.8EG 7.82024-05-16
Animate versions 24.0.2, 23.0.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
- CVE-2024-30038HIGHCVSS 7.8EG 7.82024-05-14
Win32k Elevation of Privilege Vulnerability
- CVE-2024-34771HIGHCVSS 7.8EG 7.82024-05-14
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute cod…
- CVE-2024-33489HIGHCVSS 7.8EG 7.82024-05-14
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute cod…
- CVE-2022-43655HIGHCVSS 7.8EG 7.82024-05-07
Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to e…
- CVE-2021-34971HIGHCVSS 7.8EG 7.82024-05-07
Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is r…
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →