Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,698)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5460 1Deltaww 1Wplsoft Jun 17, 2026 Oct 9, 2023 N/A· v4 5.7 MEDIUM· v3 2.7 LOW· v2 A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some unknown processing of the component Modbus Data Packet Handler. The manipulation leads to heap-base...Show more A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some unknown processing of the component Modbus Data Packet Handler. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241583. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-3428 2Fedoraproject Imagemagick 3Extra Packages For Enterprise Linux FedoraImagemagick Jun 17, 2026 Oct 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and...Show more A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.Show less
CVE-2023-4911 7Canonical DebianFedoraproject+4 more 39Bootstrap Os Codeready Linux BuilderCodeready Linux Builder Eus+36 more Oct 14, 2026 Oct 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES env...Show more A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.Show less
CVE-2023-5344 2Fedoraproject Vim 2Fedora Vim Jun 17, 2026 Oct 2, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
CVE-2023-4264 1Zephyrproject 1Zephyr Jun 17, 2026 Sep 27, 2023 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.
CVE-2023-4504 3Debian FedoraprojectOpenprinting 4Cups Debian LinuxFedora+1 more Jun 17, 2026 Sep 21, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in C...Show more Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.Show less
CVE-2023-32461 1Dell 52Emc Xc Core Xc450 Firmware Emc Xc Core Xc650 FirmwareEmc Xc Core Xc6520 Firmware+49 more Jun 17, 2026 Sep 15, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially e...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges. Show less
CVE-2023-32643 1Gnome 1Glib Oct 15, 2026 Sep 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib di...Show more A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.Show less
CVE-2023-38147 1Microsoft 10Windows 10 1507 Windows 10 1607Windows 10 1809+7 more Jun 17, 2026 Sep 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Miracast Wireless Display Remote Code Execution Vulnerability
CVE-2023-38143 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36793 1Microsoft 5.net .net FrameworkVisual Studio 2017+2 more Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Visual Studio Remote Code Execution Vulnerability
CVE-2023-36772 1Microsoft 13d Builder Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-36771 1Microsoft 13d Builder Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-36770 1Microsoft 13d Builder Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-36740 1Microsoft 13d Viewer Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Viewer Remote Code Execution Vulnerability
CVE-2023-36739 1Microsoft 13d Viewer Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Viewer Remote Code Execution Vulnerability
CVE-2023-38076 1Siemens 3Jt2go Teamcenter VisualizationTecnomatix Plant Simulation Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All vers...Show more A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041)Show less
CVE-2023-38071 1Siemens 3Jt2go Teamcenter VisualizationTecnomatix Plant Simulation Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All vers...Show more A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20824)Show less
CVE-2023-4781 4Apple DebianNeovim+1 more 4Debian Linux MacosNeovim+1 more Sep 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
CVE-2023-4751 3Apple NeovimVim 3Macos NeovimVim Sep 17, 2026 Sep 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

Previous 1...149150151...185 Next