CWE-122
3,698 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CVEs (3,698)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
2Level1 Realtek2Rtl819x Jungle Software Development Kit Wbr 6013 FirmwareJun 17, 2026 Jul 8, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrary code execution. An...Show more |
The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. T...Show more |
Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc. |
The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2,...Show more |
FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column. |
Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c. |
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function. |
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc |
1Autodesk 9Advance Steel AutocadAutocad Architecture+6 moreJun 17, 2026 Jun 25, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash...Show more |