cve.bz

CWE-122: Heap-based Buffer Overflow, page 43

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 2.0CVE-2025-7208EPSS 0.7%

    A vulnerability was found in 9fans plan9port up to 9da5b44. It has been classified as critical. This affects the function edump in the library /src/plan9port/src/libsec/port/x509.c. The manipulation leads to heap-based buffer overflow. The…

  2. 1.9CVE-2025-7207EPSS 0.3%

    A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-b…

  3. 7.8CVE-2025-47131EPSS 0.3%

    Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

  4. 7.8CVE-2025-47125EPSS 0.3%

    Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

  5. 7.8CVE-2025-47123EPSS 0.3%

    Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

  6. 7.8CVE-2025-47122EPSS 0.3%

    Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

  7. 7.8CVE-2025-47099EPSS 0.3%

    InCopy versions 20.3, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…

  8. 7.8CVE-2025-47134EPSS 0.3%

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  9. 7.8CVE-2025-47103EPSS 0.3%

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  10. 7.8CVE-2025-43591EPSS 0.3%

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  11. 7.8CVE-2025-43582EPSS 0.3%

    Substance3D - Viewer versions 0.22 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user, scope unchanged. Exploitation of this issue require…

  12. 8.8CVE-2025-49753EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  13. 7.0CVE-2025-49744ExploitEPSS 0.8%

    Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2025-49742EPSS 0.3%

    Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.

  15. 7.8CVE-2025-49732EPSS 0.3%

    Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2025-49730ExploitEPSS 0.7%

    Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.

  17. 8.8CVE-2025-49729EPSS 0.7%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  18. 7.0CVE-2025-49727EPSS 0.4%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2025-49721EPSS 0.6%

    Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.

  20. 8.5CVE-2025-49717EPSS 1.1%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  21. 7.8CVE-2025-49705EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  22. 8.4CVE-2025-49697EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  23. 8.4CVE-2025-49696EPSS 0.6%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  24. 8.0CVE-2025-49691EPSS 0.6%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network.

  25. 7.8CVE-2025-49683ExploitEPSS 2.1%

    Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.

  26. 8.8CVE-2025-49676EPSS 1.0%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  27. 8.8CVE-2025-49674EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  28. 8.8CVE-2025-49673EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  29. 8.8CVE-2025-49672EPSS 1.0%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  30. 6.5CVE-2025-49670EPSS 1.0%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  31. 8.8CVE-2025-49669EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  32. 8.8CVE-2025-49668EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  33. 7.2CVE-2025-49666EPSS 1.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.

  34. 8.8CVE-2025-49663EPSS 0.9%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  35. 8.8CVE-2025-49657EPSS 1.1%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  36. 8.8CVE-2025-48824EPSS 1.1%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  37. 7.8CVE-2025-48805EPSS 0.4%

    Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.

  38. 8.8CVE-2025-47998EPSS 1.1%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  39. 7.8CVE-2025-47987ExploitEPSS 1.8%

    Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.

  40. 9.8CVE-2025-47981EPSS 41%

    Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

  41. 8.4CVE-2025-50130EPSS 0.2%

    A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary …

  42. 8.8CVE-2025-20686EPSS 0.4%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for ex…

  43. 8.8CVE-2025-20685EPSS 0.4%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for ex…

  44. 9.8CVE-2025-20680EPSS 0.8%

    In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch I…

  45. 7.5CVE-2025-53184EPSS 0.2%

    Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

  46. 7.5CVE-2025-53183EPSS 0.2%

    Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

  47. 7.5CVE-2025-53182EPSS 0.2%

    Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

  48. 7.5CVE-2025-53181EPSS 0.2%

    Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

  49. 7.5CVE-2025-53180EPSS 0.2%

    Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

  50. 7.5CVE-2025-53179EPSS 0.2%

    Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.