CWE-122 - Heap-based Buffer Overflow

Description

A heap-overflow means overflow of the buffer located in heap portion of memory (and uses a routine such as malloc()). Buffer overflow often leads to security errors that allows attackers to cause arbitary code execution and even system crash.
The vulnerability is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-122

Multiple vulnerabilities in Siemens Simcenter Nastran 2024-10-10
High Yes

Multiple vulnerabilities in IBM QRadar Suite Software 2024-10-09
High Yes

Multiple vulnerabilities in Adobe Animate 2024-10-09
High Yes

eap-based buffer overflow in Microsoft ActiveX Data Objects 2024-10-09
High Yes

Multiple vulnerabilities in Microsoft Windows Kernel 2024-10-08
Medium Yes

Heap-based buffer overflow in Microsoft Windows Local Security Authority (LSA) 2024-10-08
Low Yes

Multiple vulnerabilities in Microsoft Windows Secure Kernel Mode 2024-10-08
Low Yes

Heap-based buffer overflow in Microsoft Windows Telephony Server 2024-10-08
High Yes

Multiple vulnerabilities in Adobe Substance 3D Stager 2024-10-08
High Yes

Multiple vulnerabilities in Microsoft Windows Routing and Remote Access Service (RRAS) 2024-10-08
High Yes

References

Description of CWE-122 on Mitre website