cve.bz

CWE-122: Heap-based Buffer Overflow, page 45

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2025-30388EPSS 4.4%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

  2. 7.8CVE-2025-30376EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  3. 7.8CVE-2025-29979EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  4. 8.8CVE-2025-29967EPSS 1.3%

    Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  5. 8.8CVE-2025-29966EPSS 1.4%

    Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

  6. 8.8CVE-2025-29964EPSS 1.1%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  7. 8.8CVE-2025-29963EPSS 1.1%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  8. 8.8CVE-2025-29962EPSS 16%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  9. 7.8CVE-2025-24063EPSS 0.7%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  10. 9.8CVE-2025-47815EPSS 0.3%

    libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.

  11. 9.8CVE-2025-47814EPSS 0.3%

    libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c.

  12. 8.7CVE-2025-3713EPSS 1.0%

    The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack.

  13. 8.7CVE-2025-3712EPSS 1.0%

    The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack.

  14. 6.9CVE-2025-1252EPSS 0.2%

    Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.…

  15. 5.5CVE-2025-31177EPSS 0.2%

    gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

  16. 9.8CVE-2025-32401EPSS 0.3%

    An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.

  17. 7.5CVE-2025-32400EPSS 0.4%

    An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.

  18. 7.5CVE-2025-32397EPSS 0.4%

    An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.

  19. 7.5CVE-2025-32396EPSS 0.4%

    An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.

  20. 8.7CVE-2025-4355EPSS 1.2%

    A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate…

  21. 8.8CVE-2025-4096EPSS 0.4%

    Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  22. 7.8CVE-2024-6031EPSS 0.2%

    Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to ex…

  23. 7.3CVE-2025-46333EPSS 0.2%

    z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when writing from one surface to another using `z2d.compositor.StrideCompositor.run`, and higher-level operations when the anti-aliasing …

  24. 8.8CVE-2025-1049EPSS 0.4%

    Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this…

  25. 7.8CVE-2025-1045EPSS 0.4%

    Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interactio…

  26. 4.8CVE-2025-3791EPSS 0.2%

    A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affects the function jx9MemObjStore of the file /data/src/benchmarks/unqlite/unqlite.c. The manipulation …

  27. 8.8CVE-2025-3619EPSS 0.5%

    Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

  28. 7.8CVE-2025-2497EPSS 0.3%

    A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

  29. 7.8CVE-2025-1656EPSS 0.3%

    A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrar…

  30. 7.8CVE-2025-1275EPSS 0.4%

    A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute …

  31. 7.8CVE-2025-1273EPSS 0.2%

    A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrar…

  32. 9.8CVE-2025-24797EPSS 0.9%

    Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentiall…

  33. 6.9CVE-2025-3277EPSS 1.3%

    An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size…

  34. 7.3CVE-2025-31344EPSS 0.3%

    Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

  35. 1.9CVE-2025-3549EPSS 0.3%

    A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component…

  36. 1.9CVE-2025-3548EPSS 0.3%

    A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manip…

  37. 8.4CVE-2024-56406EPSS 0.5%

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of th…

  38. 4.8CVE-2025-3512EPSS 0.2%

    There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow. This issue affects Qt from 6.8.0 to 6.8.4. V…

  39. 7.7CVE-2025-30644EPSS 0.3%

    A Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator (FPC) of Juniper Networks Junos OS on EX2300, EX3400, EX4100, EX4300, EX4300MP, EX4400, EX4600, EX4650-48Y, and QFX5k Series allows an attacker to send a specific …

  40. 7.8CVE-2025-30299EPSS 0.3%

    Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

  41. 7.8CVE-2025-30295EPSS 0.3%

    Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…

  42. 7.8CVE-2025-29811EPSS 0.6%

    Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2025-27752EPSS 1.1%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  44. 7.8CVE-2025-27490EPSS 0.6%

    Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  45. 8.0CVE-2025-27487EPSS 1.5%

    Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

  46. 7.0CVE-2025-27478EPSS 0.5%

    Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

  47. 8.8CVE-2025-27477EPSS 1.6%

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  48. 7.8CVE-2025-27199EPSS 0.4%

    Animate versions 24.0.7, 23.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  49. 7.8CVE-2025-27198EPSS 0.4%

    Photoshop Desktop versions 25.12.1, 26.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  50. 7.8CVE-2025-27196EPSS 0.4%

    Premiere Pro versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…