cve.bz

CWE-122: Heap-based Buffer Overflow, page 47

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2025-24985KEVEPSS 3.9%

    Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

  2. 7.8CVE-2025-24067EPSS 0.7%

    Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2025-24066EPSS 0.7%

    Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2025-24057EPSS 1.0%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  5. 8.8CVE-2025-24056EPSS 1.6%

    Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.

  6. 8.8CVE-2025-24051EPSS 1.5%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  7. 7.8CVE-2025-24050EPSS 0.5%

    Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2025-24048EPSS 0.5%

    Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2025-21180EPSS 0.9%

    Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

  10. 7.8CVE-2025-21169EPSS 0.3%

    Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact…

  11. 2.3CVE-2025-2153EPSS 0.5%

    A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to …

  12. 5.3CVE-2025-2152EPSS 0.5%

    A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. Th…

  13. 9.8CVE-2024-41147EPSS 0.7%

    An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An attacker can provide a malicious file to tri…

  14. 8.2CVE-2025-1943EPSS 0.4%

    Memory safety bugs present in Firefox 135 and Thunderbird 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability…

  15. 4.8CVE-2025-1788EPSS 0.3%

    A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to …

  16. 8.4CVE-2025-22881EPSS 0.3%

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this v…

  17. 6.5CVE-2024-27245EPSS 0.6%

    Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

  18. 8.8CVE-2024-45421EPSS 0.6%

    Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.

  19. 8.7CVE-2025-1538EPSS 1.5%

    A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. The attack can be launched …

  20. 8.6CVE-2025-27091EPSS 0.7%

    OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulner…

  21. 8.8CVE-2025-1426EPSS 0.6%

    Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  22. 8.8CVE-2025-0999EPSS 0.6%

    Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  23. 5.1CVE-2025-0633EPSS 0.2%

    Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory

  24. 5.3CVE-2025-22920EPSS 0.3%

    A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Servi…

  25. 5.5CVE-2024-53310EPSS 0.3%

    A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a specially crafted file is passed to the -ff parameter. The vulnerability occurs due to improper…

  26. 4.6CVE-2024-37601EPSS 0.3%

    An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of th…

  27. 8.4CVE-2023-31276EPSS 0.2%

    Heap-based buffer overflow in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, before version 02.01.0017 and Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP bef…

  28. 6.8CVE-2024-0145EPSS 0.9%

    NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and da…

  29. 8.8CVE-2025-1052EPSS 1.0%

    Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit th…

  30. 8.8CVE-2025-0903EPSS 0.6%

    PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is r…

  31. 7.8CVE-2025-21418KEVEPSS 2.1%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  32. 7.0CVE-2025-21414EPSS 0.6%

    Windows Core Messaging Elevation of Privileges Vulnerability

  33. 8.8CVE-2025-21410EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  34. 8.8CVE-2025-21407EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  35. 7.8CVE-2025-21390EPSS 0.8%

    Microsoft Excel Remote Code Execution Vulnerability

  36. 8.1CVE-2025-21376EPSS 9.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  37. 7.8CVE-2025-21375EPSS 0.6%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  38. 8.8CVE-2025-21371EPSS 2.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  39. 8.8CVE-2025-21369EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  40. 8.8CVE-2025-21368EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  41. 8.8CVE-2025-21208EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  42. 8.8CVE-2025-21200EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  43. 8.8CVE-2025-21190EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  44. 7.0CVE-2025-21184EPSS 0.6%

    Windows Core Messaging Elevation of Privileges Vulnerability

  45. 7.8CVE-2025-21123EPSS 0.3%

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

  46. 2.3CVE-2025-1176EPSS 0.7%

    A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack ma…

  47. 7.8CVE-2025-22880EPSS 0.2%

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this v…

  48. 8.4CVE-2023-40222EPSS 0.2%

    In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files. This could lead to a heap-based buffer overflow. An attacker could leverage t…

  49. 6.3CVE-2025-0870EPSS 0.5%

    A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4_DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overfl…

  50. 4.9CVE-2025-0662EPSS 0.4%

    In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full …