CWE-122— Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog

3,271 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-122page 44 of 66

CVE-2023-21783HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21782HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21781HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21780HIGHCVSS 7.8EG 7.8
2023-01-10
3D Builder Remote Code Execution Vulnerability
CVE-2023-21738HIGHCVSS 7.8EG 7.8
2023-01-10
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21737HIGHCVSS 7.8EG 7.8
2023-01-10
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-0051HIGHCVSS 7.8EG 7.8
2023-01-04
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
CVE-2022-44910HIGHCVSS 7.8EG 7.8
2022-12-14
Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c.
CVE-2022-2948HIGHCVSS 7.8EG 7.8
2022-12-07
GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.
CVE-2022-4141HIGHCVSS 7.8EG 7.8
2022-11-25
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
CVE-2022-45188HIGHCVSS 7.8EG 7.8
2022-11-12
Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).
CVE-2022-39136HIGHCVSS 7.8EG 7.8
2022-11-08
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V13.3 (All versions >…
CVE-2022-2069HIGHCVSS 7.8EG 7.8
2022-10-20
The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow a…
CVE-2022-37864HIGHCVSS 7.8EG 7.8
2022-10-11
A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an a…
CVE-2022-35708HIGHCVSS 7.8EG 7.8
2022-09-19
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…
CVE-2022-35706HIGHCVSS 7.8EG 7.8
2022-09-19
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…
CVE-2022-3234HIGHCVSS 7.8EG 7.8
2022-09-17
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
CVE-2022-38433HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue …
CVE-2022-38432HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue …
CVE-2022-38415HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…
CVE-2022-38414HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…
CVE-2022-38413HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…
CVE-2022-38405HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…
CVE-2022-38404HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…
CVE-2022-38401HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…
CVE-2022-38411HIGHCVSS 7.8EG 7.8
2022-09-16
Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re…
CVE-2022-40661HIGHCVSS 7.8EG 7.8
2022-09-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
CVE-2022-40660HIGHCVSS 7.8EG 7.8
2022-09-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
CVE-2022-40655HIGHCVSS 7.8EG 7.8
2022-09-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
CVE-2022-26061HIGHCVSS 7.8EG 7.8
2022-08-22
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-2849HIGHCVSS 7.8EG 7.8
2022-08-17
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
CVE-2022-2819HIGHCVSS 7.8EG 7.8
2022-08-15
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
CVE-2022-35677HIGHCVSS 7.8EG 7.8
2022-08-11
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE-2022-35676HIGHCVSS 7.8EG 7.8
2022-08-11
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE-2022-2580HIGHCVSS 7.8EG 7.8
2022-08-01
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
CVE-2022-2571HIGHCVSS 7.8EG 7.8
2022-08-01
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
CVE-2022-2522HIGHCVSS 7.8EG 7.8
2022-07-25
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
CVE-2022-2122HIGHCVSS 7.8EG 7.8
2022-07-19
DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc u…
CVE-2022-1925HIGHCVSS 7.8EG 7.8
2022-07-19
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matr…
CVE-2022-1924HIGHCVSS 7.8EG 7.8
2022-07-19
DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending o…
CVE-2022-1923HIGHCVSS 7.8EG 7.8
2022-07-19
DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending…
CVE-2022-1922HIGHCVSS 7.8EG 7.8
2022-07-19
DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS.…
CVE-2022-1920HIGHCVSS 7.8EG 7.8
2022-07-19
Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.
CVE-2022-34250HIGHCVSS 7.8EG 7.8
2022-07-15
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…
CVE-2022-34249HIGHCVSS 7.8EG 7.8
2022-07-15
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…
CVE-2022-34246HIGHCVSS 7.8EG 7.8
2022-07-15
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…
CVE-2022-34245HIGHCVSS 7.8EG 7.8
2022-07-15
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…
CVE-2022-34241HIGHCVSS 7.8EG 7.8
2022-07-15
Adobe Character Animator version 4.4.7 (and earlier) and 22.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
CVE-2022-2344HIGHCVSS 7.8EG 7.8
2022-07-08
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
CVE-2022-2343HIGHCVSS 7.8EG 7.8
2022-07-08
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.

Map vulnerabilities like CWE-122 to your infrastructure

EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →