← Back
CWE-122

2,307 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

JSON object

Loading...

CVEs (2,307)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1Indesign
Nov 16, 2024
Nov 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Substance 3d Painter
Nov 13, 2024
Nov 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...Show more
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Substance 3d Painter
Nov 13, 2024
Nov 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...Show more
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Substance 3d Painter
Nov 13, 2024
Nov 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...Show more
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Illustrator
Nov 14, 2024
Nov 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...Show more
Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Fortinet
3Fortianalyzer
FortimanagerFortimanager Cloud
Jan 31, 2025
Nov 12, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 th...Show more
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specially crafted http requestsShow less
1Microsoft
4365 Apps
ExcelOffice+1 more
Nov 16, 2024
Nov 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft Excel Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Nov 15, 2024
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability