CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,271 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 45 of 66
- CVE-2022-2284HIGHCVSS 7.8EG 7.82022-07-02
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
- CVE-2022-2264HIGHCVSS 7.8EG 7.82022-07-01
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
- CVE-2022-2182HIGHCVSS 7.8EG 7.82022-06-23
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-2125HIGHCVSS 7.8EG 7.82022-06-19
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-30654HIGHCVSS 7.8EG 7.82022-06-16
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…
- CVE-2022-30650HIGHCVSS 7.8EG 7.82022-06-16
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…
- CVE-2022-30661HIGHCVSS 7.8EG 7.82022-06-16
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…
- CVE-2022-30658HIGHCVSS 7.8EG 7.82022-06-16
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…
- CVE-2022-30540HIGHCVSS 7.8EG 7.82022-06-02
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code
- CVE-2022-1942HIGHCVSS 7.8EG 7.82022-05-31
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-1886HIGHCVSS 7.8EG 7.82022-05-26
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-1733HIGHCVSS 7.8EG 7.82022-05-17
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
- CVE-2022-28234HIGHCVSS 7.8EG 7.82022-05-11
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulti…
- CVE-2022-1621HIGHCVSS 7.8EG 7.82022-05-10
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
- CVE-2022-1619HIGHCVSS 7.8EG 7.82022-05-08
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
- CVE-2022-1381HIGHCVSS 7.8EG 7.82022-04-18
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
- CVE-2022-29072HIGHCVSS 7.8EG 7.82022-04-15
7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in…
- CVE-2021-21948HIGHCVSS 7.8EG 7.82022-04-14
A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to t…
- CVE-2022-21214HIGHCVSS 7.8EG 7.82022-04-12
The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.
- CVE-2022-1240HIGHCVSS 7.8EG 7.82022-04-06
Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I thi…
- CVE-2022-1160HIGHCVSS 7.8EG 7.82022-03-30
heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.
- CVE-2022-0943HIGHCVSS 7.8EG 7.82022-03-14
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
- CVE-2022-24096HIGHCVSS 7.8EG 7.82022-03-11
Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss…
- CVE-2022-0676HIGHCVSS 7.8EG 7.82022-02-22
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
- CVE-2022-24052HIGHCVSS 7.8EG 7.82022-02-18
MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this…
- CVE-2021-46653HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-46648HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-46647HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-46606HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-46605HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-46603HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-46577HIGHCVSS 7.8EG 7.82022-02-18
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
- CVE-2021-21958HIGHCVSS 7.8EG 7.82022-02-16
A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file can lead to memory corruption and potential arbitrary code execution. An attack…
- CVE-2022-0572HIGHCVSS 7.8EG 7.82022-02-14
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2021-44000HIGHCVSS 7.8EG 7.82022-02-09
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visu…
- CVE-2022-0417HIGHCVSS 7.8EG 7.82022-02-01
Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.
- CVE-2022-0407HIGHCVSS 7.8EG 7.82022-01-30
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-0392HIGHCVSS 7.8EG 7.82022-01-28
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.
- CVE-2022-0361HIGHCVSS 7.8EG 7.82022-01-26
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-0359HIGHCVSS 7.8EG 7.82022-01-26
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2022-0261HIGHCVSS 7.8EG 7.82022-01-18
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
- CVE-2021-44709HIGHCVSS 7.8EG 7.82022-01-14
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary co…
- CVE-2021-23157HIGHCVSS 7.8EG 7.82022-01-14
WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.
- CVE-2021-34945HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-34938HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-34907HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-34905HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-34904HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-34900HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
- CVE-2021-34896HIGHCVSS 7.8EG 7.82022-01-13
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →