cve.bz

CWE-122: Heap-based Buffer Overflow, page 13

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-92 Forced Integer Overflow Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-122, as MITRE names them. Credits.

Ask an AI about CWE-122

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-81992EPSS 0.3%

    Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

  2. 7.8CVE-2026-82006EPSS 0.3%

    Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  3. 5.5CVE-2026-86716EPSS 0.6%

    A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. Th…

  4. 7.8CVE-2026-58820EPSS 0.10%

    In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.

  5. 7.8CVE-2026-55294EPSS 0.10%

    In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n…

  6. 7.8CVE-2026-49932EPSS 0.10%

    In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl…

  7. 9.8CVE-2026-49921EPSS 0.4%

    In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

  8. 8.8CVE-2026-49882EPSS 0.4%

    In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for explo…

  9. 7.8CVE-2026-45531EPSS 0.10%

    In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi…

  10. 7.8CVE-2026-45515EPSS 0.10%

    In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges neede…

  11. 8.0CVE-2026-28662EPSS 0.2%

    In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User in…

  12. 8.8CVE-2026-28618EPSS 0.4%

    In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

  13. 7.8CVE-2026-85880KEVEPSS 0.4%

    Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

  14. 8.8CVE-2026-85877EPSS 0.8%

    Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.

  15. 7.8CVE-2026-84000EPSS 0.3%

    Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

  16. 8.8CVE-2026-83998EPSS 0.8%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  17. 8.8CVE-2026-83996EPSS 0.3%

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-83995EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  19. 8.8CVE-2026-83992EPSS 0.8%

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

  20. 7.8CVE-2026-83988EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-83987EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-83986EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-83985EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-83983EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-83982EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-83981EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-83980EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-83978EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-83977EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-83976EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-83975EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2026-83974EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-83973EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-83972EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-83971EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-83970EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-83969EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-83967EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-83955EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-83954EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-83952EPSS 0.3%

    Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-81960EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  43. 7.8CVE-2026-81959EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  44. 8.8CVE-2026-81955EPSS 0.8%

    Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  45. 8.8CVE-2026-81952EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  46. 7.8CVE-2026-81951EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2026-81948EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2026-81947EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2026-81398EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  50. 7.8CVE-2026-81397EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.