CWE-122
3,697 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CVEs (3,697)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
1Microsoft 2Ole Db Driver For Sql Server Sql ServerOct 8, 2026 Jun 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft SQL OLE DB Remote Code Execution Vulnerability |
1Microsoft 2Odbc Driver For Sql Server Sql ServerJun 17, 2026 Jun 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
1Microsoft 2Odbc Driver For Sql Server Sql ServerJun 17, 2026 Jun 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
1Microsoft 2Odbc Driver For Sql Server Sql ServerJun 17, 2026 Jun 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
1Microsoft 6.net .net FrameworkVisual Studio+3 moreJun 17, 2026 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
1Microsoft 3365 Apps OfficeOffice Long Term Servicing ChannelJun 17, 2026 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Office Remote Code Execution Vulnerability |
1Microsoft 4365 Apps ExcelOffice Long Term Servicing Channel+1 moreJun 17, 2026 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Excel Remote Code Execution Vulnerability |
Microsoft SharePoint Server Denial of Service Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jun 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
1Microsoft 10Windows 10 1507 Windows 10 1607Windows 10 1809+7 moreJun 17, 2026 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Media Remote Code Execution Vulnerability |
1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Jun 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
1Microsoft 13Remote Desktop Client Windows 10 1507Windows 10 1607+10 moreJun 17, 2026 Jun 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Remote Desktop Client Remote Code Execution Vulnerability |
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9...Show more |
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages. |
Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are
vulnerable to heap-based buffer overflow, which could allow an attacker
to execute arbitrary code.
|
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code exec...Show more |
2Debian Wireshark2Debian Linux WiresharkJun 17, 2026 Jun 7, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the conte...Show more |
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing. |
1Microsoft 3365 Apps OfficeOffice Long Term Servicing ChannelJun 17, 2026 Jun 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Office Remote Code Execution Vulnerability |