CWE-122 · Heap-based Buffer Overflow (page 18)
Page 18 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-20260 | Critical | 9.8 | 2025-06-18 | A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of… |
CVE-2025-49850 | | 2025-06-17 | A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data… | |
CVE-2025-6120 | Medium | 5.3 | 2025-06-16 | A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function read_meshes in… |
CVE-2025-47868 | Critical | 9.8 | 2025-06-16 | Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part o… |
CVE-2025-32717 | High | 8.4 | 2025-06-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47107 | High | 7.8 | 2025-06-10 | InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the contex… |
CVE-2025-47174 | High | 7.8 | 2025-06-10 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-47169 | High | 7.8 | 2025-06-10 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47162 | High | 8.4 | 2025-06-10 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-33066 | High | 8.8 | 2025-06-10 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
CVE-2025-33064 | High | 8.8 | 2025-06-10 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. |
CVE-2025-32718 | High | 7.8 | 2025-06-10 | Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally. |
CVE-2025-32713 | High | 7.8 | 2025-06-10 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-30317 | High | 7.8 | 2025-06-10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2025-5915 | Medium | 6.6 | 2025-06-09 | A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exce… |
CVE-2025-5750 | High | 8.8 | 2025-06-06 | WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows netwo… |
CVE-2024-56805 | Medium | 5.4 | 2025-06-06 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attacker… |
CVE-2025-48910 | Medium | 5.5 | 2025-06-06 | Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-1051 | High | 8.8 | 2025-06-02 | Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on… |
CVE-2025-48990 | | 2025-06-02 | NeKernal is a free and open-source operating system stack. Version 0.0.2 has a 1-byte heap overflow in `rt_copy_memory`, which unconditionally wrote a null ter… | |
CVE-2025-20672 | Critical | 9.8 | 2025-06-02 | In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execu… |
CVE-2025-44905 | High | 8.8 | 2025-05-30 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function. |
CVE-2025-44904 | High | 8.8 | 2025-05-30 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. |
CVE-2025-48797 | High | 7.3 | 2025-05-27 | A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP… |
CVE-2025-23123 | Critical | 10.0 | 2025-05-19 | A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the U… |
CVE-2025-40906 | Critical | 9.8 | 2025-05-16 | BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities. Those include CVE-2017-14227, CVE-2018-16790… |
CVE-2025-40907 | Medium | 5.3 | 2025-05-16 | FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by… |
CVE-2025-2900 | High | 7.5 | 2025-05-14 | IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denia… |
CVE-2025-47436 | Critical | 9.8 | 2025-05-14 | Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted ma… |
CVE-2025-30330 | High | 7.8 | 2025-05-13 | Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2025-30388 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
CVE-2025-30376 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29979 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29967 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-29966 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. |
CVE-2025-29964 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29963 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29962 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-24063 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-47815 | Medium | 4.5 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in… |
CVE-2025-47814 | Medium | 4.5 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in… |
CVE-2025-3713 | High | 7.5 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote atta… |
CVE-2025-3712 | High | 7.5 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote atta… |
CVE-2025-1252 | High | 7.1 | 2025-05-08 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Profession… |
CVE-2025-31177 | Medium | 5.5 | 2025-05-07 | gnuplot is affected by a heap buffer overflow at function utf8_copy_one. |
CVE-2025-32401 | Medium | 4.8 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending… |
CVE-2025-32400 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-32397 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-32396 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-4355 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/… |
CVE-2025-4096 | High | 8.8 | 2025-05-05 | Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-6031 | High | 7.8 | 2025-04-30 | Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on… |
CVE-2025-46333 | | 2025-04-25 | z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when writing from one surface to another using `z2d.compo… | |
CVE-2025-1049 | High | 8.8 | 2025-04-23 | Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on… |
CVE-2025-1045 | High | 7.8 | 2025-04-23 | Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar… |
CVE-2025-3791 | Medium | 5.3 | 2025-04-18 | A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affects the function jx9M… |
CVE-2025-3619 | High | 8.8 | 2025-04-16 | Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2025-2497 | High | 7.8 | 2025-04-15 | A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this… |
CVE-2025-1656 | High | 7.8 | 2025-04-15 | A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can levera… |
CVE-2025-1275 | High | 7.8 | 2025-04-15 | A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor ca… |
CVE-2025-1273 | High | 7.8 | 2025-04-15 | A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can levera… |
CVE-2025-24797 | Critical | 9.4 | 2025-04-15 | Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-contr… |
CVE-2025-3277 | Critical | 9.8 | 2025-04-14 | An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then w… |
CVE-2025-31344 | High | 7.3 | 2025-04-14 | Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects gifli… |
CVE-2025-3549 | Medium | 5.3 | 2025-04-14 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateS… |
CVE-2025-3548 | Medium | 5.3 | 2025-04-14 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Se… |
CVE-2024-56406 | High | 8.4 | 2025-04-13 | A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.3… |
CVE-2025-3512 | | 2025-04-11 | There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdow… | |
CVE-2025-30644 | High | 7.5 | 2025-04-09 | A Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator (FPC) of Juniper Networks Junos OS on EX2300, EX3400, EX4100, EX4300, EX4300MP, EX4… |
CVE-2025-30299 | High | 7.8 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2025-30295 | High | 7.8 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2025-29811 | High | 7.8 | 2025-04-08 | Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. |
CVE-2025-27752 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-27490 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-27487 | High | 8.0 | 2025-04-08 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. |
CVE-2025-27478 | High | 7.0 | 2025-04-08 | Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
CVE-2025-27477 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-27199 | High | 7.8 | 2025-04-08 | Animate versions 24.0.7, 23.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2025-27198 | High | 7.8 | 2025-04-08 | Photoshop Desktop versions 25.12.1, 26.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2025-27196 | High | 7.8 | 2025-04-08 | Premiere Pro versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2025-27195 | High | 7.8 | 2025-04-08 | Media Encoder versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2025-27193 | High | 7.8 | 2025-04-08 | Bridge versions 14.1.5, 15.0.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the cont… |
CVE-2025-26674 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
CVE-2025-26668 | High | 7.5 | 2025-04-08 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
CVE-2025-26666 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
CVE-2025-26639 | High | 7.8 | 2025-04-08 | Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-21222 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-21221 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-21205 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-29769 | Medium | 5.5 | 2025-04-07 | libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channe… |
CVE-2025-3159 | Medium | 5.3 | 2025-04-03 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4… |
CVE-2025-3158 | Medium | 5.3 | 2025-04-03 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO… |
CVE-2025-29070 | High | 7.5 | 2025-04-01 | A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a remote attacker to cause a denial of servic… |
CVE-2025-29069 | High | 7.3 | 2025-04-01 | A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is r… |
CVE-2025-2924 | Low | 3.3 | 2025-03-28 | A vulnerability, which was classified as problematic, was found in HDF5 up to 1.14.6. This affects the function H5HL__fl_deserialize of the file src/H5HLcache… |
CVE-2025-2923 | Low | 3.3 | 2025-03-28 | A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5F_addr_encode_len of the fi… |
CVE-2025-31164 | Medium | 6.6 | 2025-03-28 | heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline. |
CVE-2025-2915 | Low | 3.3 | 2025-03-28 | A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. T… |
CVE-2025-2914 | Low | 3.3 | 2025-03-28 | A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Srialize_Sct_cb of the file src/H5FScache… |
CVE-2025-2912 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5O_msg_flush of the file s… |