Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (2,524)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-6530 1Panasonic 1Control Fpwin Pro Jun 17, 2026 Jun 7, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based buffer overflows, which may lead to remote code execution.
CVE-2019-6740 1Samsung 1Galaxy S9 Firmware Jun 17, 2026 Jun 3, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467). User interaction is required to...Show more This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ASN.1 parser. When parsing ASN.1 strings, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7472.Show less
CVE-2019-3846 7Canonical DebianFedoraproject+4 more 12A700s Firmware Active Iq Unified Manager For Vmware VsphereCn1610 Firmware+9 more Jun 17, 2026 Jun 3, 2019 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
CVE-2019-5436 7Debian F5Fedoraproject+4 more 11Debian Linux Enterprise Manager Ops CenterFedora+8 more Jun 17, 2026 May 28, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2019-3568 1Whatsapp 2Whatsapp Whatsapp Business Jun 17, 2026 May 14, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134,...Show more A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.Show less
CVE-2019-9136 1Datools 1Daviewindy Jun 17, 2026 Apr 25, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary...Show more DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.Show less
CVE-2019-9135 1Datools 1Daviewindy Jun 17, 2026 Apr 25, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code...Show more DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.Show less
CVE-2019-10951 1Deltaww 1Cncsoft Screeneditor Jun 17, 2026 Apr 17, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacke...Show more Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.Show less
CVE-2014-9187 1Honeywell 1Experion Process Knowledge System Nov 21, 2024 Mar 25, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remot...Show more Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.Show less
CVE-2015-6457 1Moxa 1Softcms Nov 21, 2024 Mar 21, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
CVE-2019-8274 2Siemens Uvnc 4Sinumerik Access Mymachine/p2p Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more Jun 17, 2026 Mar 8, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network con...Show more UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.Show less
CVE-2019-8273 2Siemens Uvnc 4Sinumerik Access Mymachine/p2p Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more Jun 17, 2026 Mar 8, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network c...Show more UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.Show less
CVE-2019-8271 2Siemens Uvnc 4Sinumerik Access Mymachine/p2p Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more Jun 17, 2026 Mar 8, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity...Show more UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.Show less
CVE-2019-5019 1Rainbowpdf 1Office Server Document Converter Jun 17, 2026 Mar 7, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary Property Set stream, t...Show more A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation between size and the number of properties in PropertySet packets, causing an out-of-bounds write that leads to heap corruption and consequent code execution.Show less
CVE-2019-8262 2Siemens Uvnc 4Sinumerik Access Mymachine/p2p Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vul...Show more UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204.Show less
CVE-2019-8258 2Siemens Uvnc 4Sinumerik Access Mymachine/p2p Sinumerik Pcu Base Win10 Software/ipcSinumerik Pcu Base Win7 Software/ipc+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revisi...Show more UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.Show less
CVE-2019-6539 1We Con 1Levistudiou Jun 17, 2026 Feb 13, 2019 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Tr...Show more Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.Show less
CVE-2018-8800 3Debian OpensuseRdesktop 3Debian Linux LeapRdesktop Jun 17, 2026 Feb 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memory corruption and probably even a remote code execution.
CVE-2018-8797 3Debian OpensuseRdesktop 3Debian Linux LeapRdesktop Jun 17, 2026 Feb 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corruption and probably even a remote code execution.
CVE-2018-8793 3Debian OpensuseRdesktop 3Debian Linux LeapRdesktop Jun 17, 2026 Feb 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory corruption and probably even a remote code execution.

Previous 1...122123124...127 Next