cve.bz

CWE-122: Heap-based Buffer Overflow, page 48

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.9CVE-2025-0753EPSS 0.5%

    A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. T…

  2. 6.9CVE-2025-0751EPSS 0.5%

    A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to init…

  3. 9.8CVE-2024-50698EPSS 0.6%

    SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content.

  4. 8.8CVE-2019-15690EPSS 0.8%

    LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in re…

  5. 9.8CVE-2024-55192EPSS 0.6%

    OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).

  6. 8.2CVE-2025-0611EPSS 0.4%

    Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  7. 7.5CVE-2025-20128EPSS 1.8%

    A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a…

  8. 8.8CVE-2023-50739EPSS 0.6%

    A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

  9. 9.8CVE-2024-12084EPSS 73%

    A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacke…

  10. 8.8CVE-2025-0434EPSS 6.0%

    Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  11. 4.7CVE-2024-10254EPSS 0.1%

    A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.

  12. 4.7CVE-2024-10253EPSS 0.1%

    A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.

  13. 7.8CVE-2025-21139EPSS 0.3%

    Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact…

  14. 7.8CVE-2025-21137EPSS 0.3%

    Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact…

  15. 7.8CVE-2025-21129EPSS 0.3%

    Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

  16. 8.8CVE-2025-21417EPSS 1.2%

    Windows Telephony Service Remote Code Execution Vulnerability

  17. 8.8CVE-2025-21413EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  18. 8.8CVE-2025-21411EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  19. 8.8CVE-2025-21409EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  20. 7.8CVE-2025-21395EPSS 1.1%

    Microsoft Access Remote Code Execution Vulnerability

  21. 7.8CVE-2025-21382EPSS 0.5%

    Windows Graphics Component Elevation of Privilege Vulnerability

  22. 7.8CVE-2025-21378EPSS 0.6%

    Windows CSC Service Elevation of Privilege Vulnerability

  23. 7.8CVE-2025-21356EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  24. 8.8CVE-2025-21339EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  25. 7.8CVE-2025-21333KEVExploitEPSS 10%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  26. 8.8CVE-2025-21306EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  27. 8.8CVE-2025-21305EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  28. 8.8CVE-2025-21303EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  29. 8.8CVE-2025-21302EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  30. 8.8CVE-2025-21286EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  31. 8.8CVE-2025-21282EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  32. 8.8CVE-2025-21273EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  33. 8.8CVE-2025-21266EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  34. 6.6CVE-2025-21256EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  35. 8.8CVE-2025-21252EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  36. 8.8CVE-2025-21250EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  37. 8.8CVE-2025-21248EPSS 1.5%

    Windows Telephony Service Remote Code Execution Vulnerability

  38. 8.8CVE-2025-21246EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  39. 8.8CVE-2025-21245EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  40. 8.8CVE-2025-21241EPSS 1.5%

    Windows Telephony Service Remote Code Execution Vulnerability

  41. 8.8CVE-2025-21240EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  42. 8.8CVE-2025-21239EPSS 1.5%

    Windows Telephony Service Remote Code Execution Vulnerability

  43. 8.8CVE-2025-21238EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  44. 8.8CVE-2025-21237EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  45. 8.8CVE-2025-21236EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  46. 8.8CVE-2025-21233EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  47. 8.8CVE-2025-21223EPSS 1.6%

    Windows Telephony Service Remote Code Execution Vulnerability

  48. 7.8CVE-2025-21186EPSS 1.2%

    Microsoft Access Remote Code Execution Vulnerability

  49. 8.8CVE-2025-21178EPSS 1.6%

    Visual Studio Remote Code Execution Vulnerability

  50. 7.5CVE-2025-21172EPSS 1.8%

    .NET and Visual Studio Remote Code Execution Vulnerability