CWE-122 · Heap-based Buffer Overflow (page 10)
Page 10 of 27 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-65406 | Medium | 6.5 | 2025-12-01 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Servic… |
CVE-2025-8351 | High | 7.8 | 2025-12-01 | Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Deni… |
CVE-2025-66217 | High | 7.5 | 2025-11-29 | AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This v… |
CVE-2025-64330 | High | 7.5 | 2025-11-26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13… |
CVE-2025-65085 | Critical | 9.8 | 2025-11-25 | A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that co… |
CVE-2025-64693 | Critical | 9.8 | 2025-11-25 | Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially craf… |
CVE-2025-65018 | High | 7.1 | 2025-11-25 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0… |
CVE-2025-62608 | Critical | 9.1 | 2025-11-21 | MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing mal… |
CVE-2025-64524 | Low | 3.3 | 2025-11-20 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In version… |
CVE-2025-46373 | High | 7.8 | 2025-11-18 | A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 m… |
CVE-2025-63701 | Medium | 6.8 | 2025-11-14 | A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUI_x64_ADVANTECH.dll (v0.3.9200.20789) when DocumentPropertiesW() is called… |
CVE-2025-63927 | Medium | 4.0 | 2025-11-12 | A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded client execution, the function Iec10x_S… |
CVE-2025-61838 | High | 7.8 | 2025-11-11 | Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the conte… |
CVE-2025-61837 | High | 7.8 | 2025-11-11 | Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the conte… |
CVE-2025-62452 | High | 8.0 | 2025-11-11 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. |
CVE-2025-62220 | High | 8.8 | 2025-11-11 | Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. |
CVE-2025-62201 | High | 7.8 | 2025-11-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-61829 | High | 7.8 | 2025-11-11 | Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2025-61827 | High | 7.8 | 2025-11-11 | Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2025-61820 | High | 7.8 | 2025-11-11 | Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in th… |
CVE-2025-61819 | High | 7.8 | 2025-11-11 | Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2025-60724 | Critical | 9.8 | 2025-11-11 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2025-60715 | High | 8.0 | 2025-11-11 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. |
CVE-2025-60714 | High | 7.8 | 2025-11-11 | Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally. |
CVE-2025-59504 | High | 7.3 | 2025-11-11 | Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally. |
CVE-2025-61832 | High | 7.8 | 2025-11-11 | InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2025-61824 | High | 7.8 | 2025-11-11 | InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2025-61816 | High | 7.8 | 2025-11-11 | InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the contex… |
CVE-2025-62689 | High | 7.5 | 2025-11-10 | NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of th… |
CVE-2025-9458 | High | 7.8 | 2025-11-07 | A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this… |
CVE-2025-11458 | High | 8.1 | 2025-11-06 | Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2025-11206 | High | 7.1 | 2025-11-06 | Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page… |
CVE-2025-11205 | High | 8.8 | 2025-11-06 | Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
CVE-2025-54496 | High | 7.8 | 2025-11-04 | A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which may allow the attacker to execute arbitra… |
CVE-2025-54329 | High | 7.5 | 2025-11-04 | An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580… |
CVE-2025-20742 | High | 8.0 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privil… |
CVE-2025-20741 | Medium | 6.7 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-20735 | High | 7.8 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User executi… |
CVE-2025-20734 | Medium | 5.3 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-20733 | High | 7.8 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User executi… |
CVE-2025-20731 | Medium | 5.3 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-20729 | Medium | 4.2 | 2025-11-04 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-20728 | High | 7.8 | 2025-11-04 | In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execut… |
CVE-2025-20726 | High | 7.5 | 2025-11-04 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to… |
CVE-2025-57107 | High | 7.1 | 2025-10-31 | Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLT… |
CVE-2025-57106 | High | 7.5 | 2025-10-31 | Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtraction… |
CVE-2025-11464 | High | 7.8 | 2025-10-29 | Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2025-10934 | High | 7.8 | 2025-10-29 | GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2025-10922 | High | 7.8 | 2025-10-29 | GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2025-10921 | High | 7.8 | 2025-10-29 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2025-12204 | Medium | 5.3 | 2025-10-27 | A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rve_destroy of the file src/core/rvalue.c of the component Configuration F… |
CVE-2025-62526 | High | 7.9 | 2025-10-22 | OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registrati… |
CVE-2025-5517 | Medium | 6.8 | 2025-10-20 | Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Te… |
CVE-2025-11947 | Medium | 4.5 | 2025-10-19 | A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Ex… |
CVE-2025-61553 | High | 8.2 | 2025-10-16 | An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to c… |
CVE-2025-54278 | Medium | 5.5 | 2025-10-15 | Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could lev… |
CVE-2025-54268 | High | 7.8 | 2025-10-15 | Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the cont… |
CVE-2025-61804 | High | 7.8 | 2025-10-15 | Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2025-54282 | High | 7.8 | 2025-10-14 | Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2025-59295 | High | 8.8 | 2025-10-14 | Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network. |
CVE-2025-59275 | High | 7.8 | 2025-10-14 | Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
CVE-2025-59255 | High | 7.8 | 2025-10-14 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-59254 | High | 7.8 | 2025-10-14 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-59242 | High | 7.8 | 2025-10-14 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-59191 | High | 7.8 | 2025-10-14 | Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2025-58725 | High | 7.0 | 2025-10-14 | Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. |
CVE-2025-58722 | High | 7.8 | 2025-10-14 | Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2025-55697 | High | 7.8 | 2025-10-14 | Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. |
CVE-2025-57740 | High | 7.5 | 2025-10-14 | An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions… |
CVE-2025-22258 | Medium | 6.5 | 2025-10-14 | A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1… |
CVE-2024-50571 | High | 7.2 | 2025-10-14 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9… |
CVE-2025-20720 | High | 8.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privil… |
CVE-2025-20712 | High | 8.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privil… |
CVE-2025-11495 | Low | 3.3 | 2025-10-08 | A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the compone… |
CVE-2025-43912 | Medium | 5.3 | 2025-10-07 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0… |
CVE-2025-11277 | Medium | 5.3 | 2025-10-05 | A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLi… |
CVE-2025-11275 | Medium | 5.3 | 2025-10-05 | A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the li… |
CVE-2025-10504 | Medium | 6.1 | 2025-09-29 | Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. |
CVE-2025-11083 | Medium | 5.3 | 2025-09-27 | A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. T… |
CVE-2025-11082 | Medium | 5.3 | 2025-09-27 | A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing… |
CVE-2025-59938 | Medium | 6.5 | 2025-09-27 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd… |
CVE-2025-11014 | Medium | 5.3 | 2025-09-26 | A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/s… |
CVE-2025-11010 | Medium | 5.3 | 2025-09-26 | A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_include_common of the file /src/ucl_util.c. S… |
CVE-2025-10997 | Medium | 5.3 | 2025-09-26 | A flaw has been found in Open Babel up to 3.1.1. Impacted is the function ChemKinFormat::CheckSpecies of the file /src/formats/chemkinformat.cpp. Executing man… |
CVE-2025-10996 | Medium | 5.3 | 2025-09-26 | A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp… |
CVE-2025-20363 | Critical | 9.0 | 2025-09-25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, C… |
CVE-2025-10502 | High | 8.8 | 2025-09-24 | Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t… |
CVE-2025-23308 | Low | 3.3 | 2025-09-24 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run… |
CVE-2025-57638 | High | 7.5 | 2025-09-23 | Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value. |
CVE-2025-57637 | High | 7.5 | 2025-09-23 | Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing attackers to cause… |
CVE-2025-51005 | High | 7.5 | 2025-09-23 | A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly h… |
CVE-2025-56394 | High | 7.5 | 2025-09-23 | Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow. |
CVE-2025-7983 | High | 7.8 | 2025-09-17 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2025-8894 | High | 7.8 | 2025-09-16 | A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage th… |
CVE-2025-55118 | High | 8.9 | 2025-09-16 | Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: *… |
CVE-2025-58447 | Critical | 9.8 | 2025-09-09 | rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap-based buf… |
CVE-2025-54244 | High | 7.8 | 2025-09-09 | Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in th… |
CVE-2025-54910 | High | 8.4 | 2025-09-09 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-54907 | High | 7.8 | 2025-09-09 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally. |
CVE-2025-54900 | High | 7.8 | 2025-09-09 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |