CWE-122— Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog

3,271 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-122page 43 of 66

CVE-2023-26416HIGHCVSS 7.8EG 7.8
2023-04-13
Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…
CVE-2023-26413HIGHCVSS 7.8EG 7.8
2023-04-13
Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…
CVE-2023-26394HIGHCVSS 7.8EG 7.8
2023-04-12
Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…
CVE-2023-28311HIGHCVSS 7.8EG 7.8
2023-04-11
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-28292HIGHCVSS 7.8EG 7.8
2023-04-11
Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-28262HIGHCVSS 7.8EG 7.8
2023-04-11
Visual Studio Elevation of Privilege Vulnerability
CVE-2023-28225HIGHCVSS 7.8EG 7.8
2023-04-11
Windows NTLM Elevation of Privilege Vulnerability
CVE-2023-24912HIGHCVSS 7.8EG 7.8
2023-04-11
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-45115HIGHCVSS 7.8EG 7.8
2023-04-05
A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2023-25898HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25897HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25895HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25890HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25885HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25883HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25882HIGHCVSS 7.8EG 7.8
2023-03-28
Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
CVE-2023-25874HIGHCVSS 7.8EG 7.8
2023-03-27
Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
CVE-2023-25872HIGHCVSS 7.8EG 7.8
2023-03-27
Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
CVE-2023-25868HIGHCVSS 7.8EG 7.8
2023-03-27
Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
CVE-2023-25864HIGHCVSS 7.8EG 7.8
2023-03-27
Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…
CVE-2023-1655HIGHCVSS 7.8EG 7.8
2023-03-27
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
CVE-2023-22236HIGHCVSS 7.8EG 7.8
2023-02-17
Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re…
CVE-2023-0866HIGHCVSS 7.8EG 7.8
2023-02-16
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2023-23782HIGHCVSS 7.8EG 7.8
2023-02-16
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privileg…
CVE-2023-23390HIGHCVSS 7.8EG 7.8
2023-02-14
3D Builder Remote Code Execution Vulnerability
CVE-2023-23378HIGHCVSS 7.8EG 7.8
2023-02-14
Print 3D Remote Code Execution Vulnerability
CVE-2023-23377HIGHCVSS 7.8EG 7.8
2023-02-14
3D Builder Remote Code Execution Vulnerability
CVE-2023-21812HIGHCVSS 7.8EG 7.8
2023-02-14
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21804HIGHCVSS 7.8EG 7.8
2023-02-14
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-21528HIGHCVSS 7.8EG 7.8
2023-02-14
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2023-24551HIGHCVSS 7.8EG 7.8
2023-02-14
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted P…
CVE-2023-24550HIGHCVSS 7.8EG 7.8
2023-02-14
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. …
CVE-2023-0819HIGHCVSS 7.8EG 7.8
2023-02-13
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVE-2023-0760HIGHCVSS 7.8EG 7.8
2023-02-09
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.
CVE-2022-45491HIGHCVSS 7.8EG 7.8
2023-02-03
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
CVE-2022-42405HIGHCVSS 7.8EG 7.8
2023-01-26
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…
CVE-2022-42403HIGHCVSS 7.8EG 7.8
2023-01-26
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…
CVE-2023-0433HIGHCVSS 7.8EG 7.8
2023-01-21
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
CVE-2023-21605HIGHCVSS 7.8EG 7.8
2023-01-18
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of …
CVE-2023-21594HIGHCVSS 7.8EG 7.8
2023-01-13
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…
CVE-2023-21587HIGHCVSS 7.8EG 7.8
2023-01-13
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …
CVE-2023-0288HIGHCVSS 7.8EG 7.8
2023-01-13
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
CVE-2022-3160HIGHCVSS 7.8EG 7.8
2023-01-13
The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-21793HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21792HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21791HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21790HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21787HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21786HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21785HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability

Map vulnerabilities like CWE-122 to your infrastructure

EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →