Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,698)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-43626 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2024-43622 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43621 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43620 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43598 1Microsoft 1Lightgbm Jun 17, 2026 Nov 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 LightGBM Remote Code Execution Vulnerability
CVE-2024-43462 1Microsoft 3Sql Server 2016 Sql Server 2017Sql Server 2019 Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-38255 1Microsoft 3Sql Server 2016 Sql Server 2017Sql Server 2019 Jun 17, 2026 Nov 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client Remote Code Execution Vulnerability
CVE-2023-29125 1Enelx 1Waybox Pro Firmware Jun 17, 2026 Nov 5, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.
CVE-2024-10525 1Eclipse 1Mosquitto Jun 17, 2026 Oct 30, 2024 7.2 HIGH· v4 9.8 CRITICAL· v3 N/A· v2 In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_su...Show more In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients.Show less
CVE-2024-9632 - - Jun 17, 2026 Oct 30, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial...Show more A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.Show less
CVE-2024-8594 1Autodesk 8Autocad Autocad Advance SteelAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive da...Show more A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-8591 1Autodesk 8Autocad Autocad Advance SteelAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write se...Show more A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-8587 1Autodesk 8Advance Steel AutocadAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sen...Show more A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-43587 1Microsoft 1Edge Chromium Jun 17, 2026 Oct 17, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43579 1Microsoft 1Edge Chromium Jun 17, 2026 Oct 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43578 1Microsoft 1Edge Chromium Jun 17, 2026 Oct 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-47964 1Deltaww 1Cncsoft G2 Oct 17, 2024 Oct 10, 2024 8.4 HIGH· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leve...Show more Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2024-45143 1Adobe 1Substance 3d Stager Jun 17, 2026 Oct 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...Show more Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-45139 1Adobe 1Substance 3d Stager Jun 17, 2026 Oct 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...Show more Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-47417 1Adobe 1Animate Jun 17, 2026 Oct 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...125126127...185 Next