Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,113)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4264 1Zephyrproject 1Zephyr Jun 17, 2026 Sep 27, 2023 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.
CVE-2023-4504 3Debian FedoraprojectOpenprinting 4Cups Debian LinuxFedora+1 more Jun 17, 2026 Sep 21, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in C...Show more Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.Show less
CVE-2023-32461 1Dell 52Emc Xc Core Xc450 Firmware Emc Xc Core Xc650 FirmwareEmc Xc Core Xc6520 Firmware+49 more Jun 17, 2026 Sep 15, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially e...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges. Show less
CVE-2023-32643 1Gnome 1Glib Jun 17, 2026 Sep 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib di...Show more A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.Show less
CVE-2023-38147 1Microsoft 10Windows 10 1507 Windows 10 1607Windows 10 1809+7 more Jun 17, 2026 Sep 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Miracast Wireless Display Remote Code Execution Vulnerability
CVE-2023-38143 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36793 1Microsoft 5.net .net FrameworkVisual Studio 2017+2 more Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Visual Studio Remote Code Execution Vulnerability
CVE-2023-36772 1Microsoft 13d Builder Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-36771 1Microsoft 13d Builder Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-36770 1Microsoft 13d Builder Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-36740 1Microsoft 13d Viewer Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Viewer Remote Code Execution Vulnerability
CVE-2023-36739 1Microsoft 13d Viewer Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Viewer Remote Code Execution Vulnerability
CVE-2023-38076 1Siemens 3Jt2go Teamcenter VisualizationTecnomatix Plant Simulation Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All vers...Show more A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041)Show less
CVE-2023-38071 1Siemens 3Jt2go Teamcenter VisualizationTecnomatix Plant Simulation Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All vers...Show more A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20824)Show less
CVE-2023-4781 3Apple DebianVim 3Debian Linux MacosVim Jun 23, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
CVE-2023-4751 2Apple Vim 2Macos Vim Jun 17, 2026 Sep 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
CVE-2023-4738 2Apple Vim 2Macos Vim Jun 17, 2026 Sep 2, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
CVE-2023-4682 1Gpac 1Gpac Jun 17, 2026 Aug 31, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
CVE-2023-40166 1Notepad Plus Plus 1Notepad++ Jun 17, 2026 Aug 25, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clea...Show more Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.Show less
CVE-2023-40031 1Notepad Plus Plus 1Notepad++ Jun 17, 2026 Aug 25, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of pub...Show more Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++.Show less

Previous 1...120121122...156 Next