CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,271 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 42 of 66
- CVE-2023-47051HIGHCVSS 7.8EG 7.82023-11-16
Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…
- CVE-2023-47042HIGHCVSS 7.8EG 7.82023-11-16
Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
- CVE-2023-36408HIGHCVSS 7.8EG 7.82023-11-14
Windows Hyper-V Elevation of Privilege Vulnerability
- CVE-2023-4692HIGHCVSS 7.8EG 7.82023-10-25
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack m…
- CVE-2023-36730HIGHCVSS 7.8EG 7.82023-10-10
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36598HIGHCVSS 7.8EG 7.82023-10-10
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
- CVE-2023-36417HIGHCVSS 7.8EG 7.82023-10-10
Microsoft SQL OLE DB Remote Code Execution Vulnerability
- CVE-2023-43787HIGHCVSS 7.8EG 7.82023-10-10
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
- CVE-2023-38143HIGHCVSS 7.8EG 7.82023-09-12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2023-36793HIGHCVSS 7.8EG 7.82023-09-12
Visual Studio Remote Code Execution Vulnerability
- CVE-2023-36772HIGHCVSS 7.8EG 7.82023-09-12
3D Builder Remote Code Execution Vulnerability
- CVE-2023-36771HIGHCVSS 7.8EG 7.82023-09-12
3D Builder Remote Code Execution Vulnerability
- CVE-2023-36770HIGHCVSS 7.8EG 7.82023-09-12
3D Builder Remote Code Execution Vulnerability
- CVE-2023-36740HIGHCVSS 7.8EG 7.82023-09-12
3D Viewer Remote Code Execution Vulnerability
- CVE-2023-36739HIGHCVSS 7.8EG 7.82023-09-12
3D Viewer Remote Code Execution Vulnerability
- CVE-2023-38076HIGHCVSS 7.8EG 7.82023-09-12
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11),…
- CVE-2023-38071HIGHCVSS 7.8EG 7.82023-09-12
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11),…
- CVE-2023-4781HIGHCVSS 7.8EG 7.82023-09-05
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
- CVE-2023-4751HIGHCVSS 7.8EG 7.82023-09-03
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
- CVE-2023-4738HIGHCVSS 7.8EG 7.82023-09-02
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
- CVE-2023-40031HIGHCVSS 7.8EG 7.82023-08-25
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known …
- CVE-2023-38212HIGHCVSS 7.8EG 7.82023-08-09
Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…
- CVE-2023-38170HIGHCVSS 7.8EG 7.82023-08-08
HEVC Video Extensions Remote Code Execution Vulnerability
- CVE-2023-38154HIGHCVSS 7.8EG 7.82023-08-08
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-36896HIGHCVSS 7.8EG 7.82023-08-08
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-36865HIGHCVSS 7.8EG 7.82023-08-08
Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2023-2763HIGHCVSS 7.8EG 7.82023-07-12
Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities co…
- CVE-2023-35374HIGHCVSS 7.8EG 7.82023-07-11
Paint 3D Remote Code Execution Vulnerability
- CVE-2023-35363HIGHCVSS 7.8EG 7.82023-07-11
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-35337HIGHCVSS 7.8EG 7.82023-07-11
Win32k Elevation of Privilege Vulnerability
- CVE-2023-35305HIGHCVSS 7.8EG 7.82023-07-11
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-35304HIGHCVSS 7.8EG 7.82023-07-11
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-32047HIGHCVSS 7.8EG 7.82023-07-11
Paint 3D Remote Code Execution Vulnerability
- CVE-2023-37247HIGHCVSS 7.8EG 7.82023-07-11
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while…
- CVE-2023-37246HIGHCVSS 7.8EG 7.82023-07-11
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while…
- CVE-2023-34432HIGHCVSS 7.8EG 7.82023-07-10
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.
- CVE-2023-34318HIGHCVSS 7.8EG 7.82023-07-10
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.
- CVE-2023-32028HIGHCVSS 7.8EG 7.82023-06-16
Microsoft SQL OLE DB Remote Code Execution Vulnerability
- CVE-2023-32027HIGHCVSS 7.8EG 7.82023-06-16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-32026HIGHCVSS 7.8EG 7.82023-06-16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-32025HIGHCVSS 7.8EG 7.82023-06-16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-24897HIGHCVSS 7.8EG 7.82023-06-14
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
- CVE-2023-33146HIGHCVSS 7.8EG 7.82023-06-14
Microsoft Office Remote Code Execution Vulnerability
- CVE-2023-29370HIGHCVSS 7.8EG 7.82023-06-14
Windows Media Remote Code Execution Vulnerability
- CVE-2023-34488HIGHCVSS 7.8EG 7.82023-06-12
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
- CVE-2023-24014HIGHCVSS 7.8EG 7.82023-06-07
Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitrary code.
- CVE-2023-29344HIGHCVSS 7.8EG 7.82023-06-05
Microsoft Office Remote Code Execution Vulnerability
- CVE-2023-29283HIGHCVSS 7.8EG 7.82023-05-11
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
- CVE-2023-29341HIGHCVSS 7.8EG 7.82023-05-09
AV1 Video Extension Remote Code Execution Vulnerability
- CVE-2023-27911HIGHCVSS 7.8EG 7.82023-04-17
A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →