cve.bz

CWE-122: Heap-based Buffer Overflow, page 42

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2025-54212EPSS 0.3%

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

  2. 7.8CVE-2025-54211EPSS 0.3%

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

  3. 7.8CVE-2025-54209EPSS 0.3%

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

  4. 7.8CVE-2025-49560EPSS 0.3%

    Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…

  5. 7.5CVE-2025-53783EPSS 0.9%

    Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.

  6. 9.8CVE-2025-53766EPSS 8.5%

    Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

  7. 7.8CVE-2025-53741EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  8. 7.8CVE-2025-53737EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  9. 7.8CVE-2025-53732EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  10. 7.8CVE-2025-53723EPSS 0.5%

    Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  11. 8.0CVE-2025-53720EPSS 1.0%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

  12. 7.8CVE-2025-53155EPSS 0.5%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2025-53149EPSS 0.8%

    Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

  14. 8.8CVE-2025-53131EPSS 1.0%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  15. 7.8CVE-2025-50176EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.

  16. 7.8CVE-2025-50168EPSS 0.8%

    Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  17. 8.0CVE-2025-50164EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

  18. 8.8CVE-2025-50163EPSS 1.0%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  19. 8.0CVE-2025-50162EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

  20. 7.3CVE-2025-50161EPSS 0.6%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  21. 8.0CVE-2025-50160EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

  22. 7.8CVE-2025-50155EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  23. 8.8CVE-2025-49757EPSS 1.0%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  24. 7.5CVE-2025-5462EPSS 1.2%

    A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025…

  25. 8.6CVE-2025-54878EPSS 0.4%

    CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. A heap b…

  26. 1.9CVE-2025-8843EPSS 0.3%

    A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function macho_no_dead_strip of the file outmacho.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The e…

  27. 9.8CVE-2025-54951EPSS 0.7%

    A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9…

  28. 9.8CVE-2025-54949EPSS 0.7%

    A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be

  29. 9.8CVE-2025-3354EPSS 0.6%

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause th…

  30. 9.8CVE-2025-3320EPSS 0.6%

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause th…

  31. 9.8CVE-2025-23317EPSS 2.2%

    NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request. A successful exploit of this vulnerability might lead to remote code exe…

  32. 7.5CVE-2025-54630EPSS 0.3%

    :Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability.

  33. 8.4CVE-2025-7033EPSS 0.3%

    A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. …

  34. 8.4CVE-2025-7025EPSS 0.3%

    A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. …

  35. 9.8CVE-2025-54574EPSS 22%

    Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version…

  36. 8.4CVE-2025-48071EPSS 0.4%

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write operatio…

  37. 7.8CVE-2025-31280EPSS 0.3%

    A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted file may lead to heap corruption.

  38. 7.8CVE-2025-5043EPSS 0.2%

    A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbi…

  39. 7.4CVE-2025-8178EPSS 0.9%

    A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is …

  40. 6.5CVE-2025-51089EPSS 9.0%

    Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.

  41. 7.5CVE-2025-40597EPSS 23%

    A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

  42. 8.4CVE-2025-4657EPSS 0.2%

    A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute …

  43. 5.5CVE-2025-53816EPSS 0.7%

    7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issu…

  44. 6.7CVE-2025-24477EPSS 0.2%

    A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12 allows an attacker to escalate its privileges via a specially crafted CLI command

  45. 6.5CVE-2024-42648EPSS 0.4%

    NanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a Denial of Service (DoS) via a crafted CONNECT message.

  46. 1.9CVE-2025-7545EPSS 0.3%

    A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally i…

  47. 8.9CVE-2025-53630EPSS 0.4%

    llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900…

  48. 7.8CVE-2025-5040EPSS 0.2%

    A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the co…

  49. 8.2CVE-2025-32990EPSS 0.9%

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB)…

  50. 5.4CVE-2025-49604EPSS 0.4%

    For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment…