Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,138)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-43627 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43626 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2024-43622 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43621 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43620 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43598 1Microsoft 1Lightgbm Jun 17, 2026 Nov 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 LightGBM Remote Code Execution Vulnerability
CVE-2024-43462 1Microsoft 3Sql Server 2016 Sql Server 2017Sql Server 2019 Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-38255 1Microsoft 3Sql Server 2016 Sql Server 2017Sql Server 2019 Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client Remote Code Execution Vulnerability
CVE-2023-29125 1Enelx 1Waybox Pro Firmware Jun 17, 2026 Nov 5, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.
CVE-2024-10525 1Eclipse 1Mosquitto Jun 17, 2026 Oct 30, 2024 7.2 HIGH· v4 9.8 CRITICAL· v3 N/A· v2 In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_su...Show more In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients.Show less
CVE-2024-9632 - - Jun 17, 2026 Oct 30, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial...Show more A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.Show less
CVE-2024-8594 1Autodesk 8Autocad Autocad Advance SteelAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive da...Show more A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-8591 1Autodesk 8Autocad Autocad Advance SteelAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write se...Show more A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-8587 1Autodesk 8Advance Steel AutocadAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sen...Show more A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-43587 1Microsoft 1Edge Chromium Jun 17, 2026 Oct 17, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43579 1Microsoft 1Edge Chromium Jun 17, 2026 Oct 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43578 1Microsoft 1Edge Chromium Jun 17, 2026 Oct 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-47964 1Deltaww 1Cncsoft G2 Oct 17, 2024 Oct 10, 2024 8.4 HIGH· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leve...Show more Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2024-45143 1Adobe 1Substance 3d Stager Jun 17, 2026 Oct 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...Show more Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-45139 1Adobe 1Substance 3d Stager Jun 17, 2026 Oct 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...Show more Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...979899...157 Next