cve.bz

CWE-122: Heap-based Buffer Overflow, page 29

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-34699EPSS 0.2%

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

  2. 7.8CVE-2026-34698EPSS 0.2%

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

  3. 9.8CVE-2026-49841EPSS 0.4%

    FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the mod_verto HTTP request hand…

  4. 9.1CVE-2026-49840EPSS 0.3%

    FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, esl_recv_event() parses Content…

  5. 7.8CVE-2026-48574EPSS 0.4%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

  6. 8.2CVE-2026-47652EPSS 0.3%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

  7. 8.4CVE-2026-47635EPSS 0.3%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  8. 9.8CVE-2026-47291EPSS 25%

    Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

  9. 8.8CVE-2026-47289EPSS 1.0%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  10. 9.8CVE-2026-45657EPSS 15%

    Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

  11. 7.0CVE-2026-45653EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-45638EPSS 0.3%

    Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2026-45636EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  14. 7.8CVE-2026-45475EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  15. 7.8CVE-2026-45469EPSS 0.4%

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  16. 3.3CVE-2026-45466EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  17. 7.8CVE-2026-44824EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  18. 7.8CVE-2026-44819EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  19. 5.5CVE-2026-44814EPSS 0.3%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  20. 7.8CVE-2026-44811EPSS 0.3%

    Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-44808EPSS 0.3%

    Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  22. 7.5CVE-2026-44799EPSS 0.5%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  23. 7.5CVE-2026-42993EPSS 0.4%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  24. 7.5CVE-2026-42992EPSS 0.5%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  25. 7.8CVE-2026-42980EPSS 6.9%

    Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

  26. 9.6CVE-2026-42904EPSS 0.4%

    Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

  27. 7.0CVE-2026-41108EPSS 0.3%

    Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-40404EPSS 0.3%

    Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

  29. 7.3CVE-2026-24180EPSS 0.2%

    NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information dis…

  30. 3.3CVE-2026-11792EPSS 0.3%

    A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking a…

  31. 5.3CVE-2026-41981EPSS 0.07%

    Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.

  32. 7.5CVE-2026-42536EPSS 1.0%

    Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, …

  33. 7.5CVE-2026-34356EPSS 0.7%

    Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.6…

  34. 7.5CVE-2026-34355EPSS 1.2%

    A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

  35. 7.5CVE-2026-22164EPSS 0.3%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. By creating resources of certain types and presenting a set of parameters to the affected interface the exploit can…

  36. 6.5CVE-2026-11143EPSS 0.2%

    Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrom…

  37. 8.8CVE-2026-11124EPSS 0.2%

    Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  38. 8.8CVE-2026-10995EPSS 0.4%

    Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security se…

  39. 6.5CVE-2026-10993EPSS 0.3%

    Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

  40. 8.8CVE-2026-10989EPSS 0.3%

    Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security …

  41. 8.3CVE-2026-10949EPSS 0.3%

    Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  42. 7.5CVE-2026-10946EPSS 0.4%

    Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s…

  43. 8.3CVE-2026-10929EPSS 0.3%

    Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit…

  44. 7.8CVE-2026-46253EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ram_save_old() persistent_ram_save_old() can be called multiple times for the same persistent_ram_zone (e.g., via ramoops_p…

  45. 7.8CVE-2026-0100EPSS 0.07%

    In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…

  46. 8.0CVE-2026-0059EPSS 0.1%

    In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User i…

  47. 5.5CVE-2025-55664EPSS 0.2%

    A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

  48. 1.9CVE-2026-10231EPSS 0.1%

    A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total …

  49. 1.9CVE-2026-10230EPSS 0.1%

    A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::read_animations of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Such manipulation leads to heap-base…

  50. 1.9CVE-2026-10229EPSS 0.1%

    A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This manipulation causes heap-based buffer overflow. The attack…