Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,685)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-3437 2Fedoraproject Samba 2Fedora Samba Jun 17, 2026 Jan 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-...Show more A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.Show less
CVE-2021-3966 1Zephyrproject 1Zephyr Jun 17, 2026 Jan 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.
CVE-2023-21793 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21792 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21791 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21790 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21787 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21786 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21785 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21783 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21782 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21781 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21780 1Microsoft 13d Builder Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 3D Builder Remote Code Execution Vulnerability
CVE-2023-21738 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21737 1Microsoft 4365 Apps OfficeOffice Long Term Servicing Channel+1 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21733 1Microsoft 6Windows 10 20h2 Windows 10 21h2Windows 10 22h2+3 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2023-21560 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2023-0051 1Vim 1Vim Jun 17, 2026 Jan 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
CVE-2022-44430 1Google 1Android Jun 17, 2026 Jan 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-44429 1Google 1Android Jun 17, 2026 Jan 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

Previous 1...158159160...185 Next