← Back
CWE-122

3,686 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

JSON object

Loading...

CVEs (3,686)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Vox2png Project
1Vox2png
Jun 17, 2026
Feb 24, 2023
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipulation leads to heap-based buffer overflow. Attacking locally i...Show more
A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221743.Show less
1Adobe
1Animate
Jun 17, 2026
Feb 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati...Show more
Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Gpac
1Gpac
Jun 17, 2026
Feb 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.
1Fortinet
1Fortiweb
Jun 17, 2026
Feb 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to esc...Show more
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands.Show less
1Gpac
1Gpac
Jun 17, 2026
Feb 15, 2023
N/A· v4
8.8 HIGH· v3
7.5 HIGH· v2
A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based...Show more
A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.Show less
1Microsoft
3Visual Studio 2017
Visual Studio 2019Visual Studio 2022
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Visual Studio Remote Code Execution Vulnerability
1Microsoft
13d Builder
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
3D Builder Remote Code Execution Vulnerability
1Microsoft
1Print 3d
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Print 3D Remote Code Execution Vulnerability
1Microsoft
13d Builder
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
3D Builder Remote Code Execution Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Common Log File System Driver Elevation of Privilege Vulnerability
1Microsoft
13Windows 10
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Common Log File System Driver Elevation of Privilege Vulnerability
1Microsoft
12Windows 10
Windows 10 1607Windows 10 1809+9 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Graphics Component Elevation of Privilege Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
1Microsoft
13Windows 10
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
1Microsoft
13Windows 10
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Windows Fax Service Remote Code Execution Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Aug 19, 2026
Feb 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
1Microsoft
1Sql Server
Aug 19, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft SQL Server Remote Code Execution Vulnerability
1Siemens
1Solid Edge Se2023
Oct 24, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing...Show more
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less