CWE-122 · Heap-based Buffer Overflow (page 6)
Page 6 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18307 | High | 7.8 | 2026-08-20 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2026-18302 | High | 7.8 | 2026-08-20 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2026-18298 | High | 7.8 | 2026-08-20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2026-18296 | High | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2026-18282 | High | 8.0 | 2026-08-20 | Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t… |
CVE-2026-18281 | High | 8.0 | 2026-08-20 | Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu… |
CVE-2026-18271 | Medium | 6.8 | 2026-08-20 | Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitr… |
CVE-2026-16928 | High | 7.5 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow. |
CVE-2026-76918 | Medium | 5.5 | 2026-08-19 | SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76917 | Medium | 5.5 | 2026-08-19 | Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76889 | Medium | 4.7 | 2026-08-19 | UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76888 | Low | 3.1 | 2026-08-19 | RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76887 | Low | 3.1 | 2026-08-19 | Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76886 | High | 8.1 | 2026-08-19 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76883 | Medium | 4.7 | 2026-08-19 | Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-18102 | Low | 3.5 | 2026-08-19 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking. |
CVE-2026-75619 | Medium | 5.7 | 2026-08-19 | Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially cr… |
CVE-2026-63633 | Critical | 9.8 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_dsp_decode_opus in libfreerdp/codec/dsp.c calls Stream_EnsureRemainin… |
CVE-2026-55194 | Critical | 9.8 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fragment in libfreerdp/core/gateway/rpc_client.c ensures the… |
CVE-2026-55193 | High | 8.8 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag val… |
CVE-2026-55191 | Critical | 9.8 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend ca… |
CVE-2026-75144 | High | 7.8 | 2026-08-19 | FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers… |
CVE-2026-75143 | Critical | 9.8 | 2026-08-19 | FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and… |
CVE-2026-75141 | High | 7.8 | 2026-08-19 | FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single… |
CVE-2026-52834 | High | 7.3 | 2026-08-19 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow lengt… |
CVE-2026-58081 | Critical | 9.8 | 2026-08-19 | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted char… |
CVE-2026-49430 | High | 7.8 | 2026-08-19 | The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-b… |
CVE-2026-49429 | High | 7.8 | 2026-08-19 | The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the o… |
CVE-2026-76046 | High | 8.3 | 2026-08-18 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute a… |
CVE-2026-76036 | Critical | 9.6 | 2026-08-18 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-76034 | High | 8.8 | 2026-08-18 | Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa… |
CVE-2026-71676 | High | 7.5 | 2026-08-18 | Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the messag… |
CVE-2026-67868 | Critical | 9.8 | 2026-08-17 | A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a… |
CVE-2026-68765 | Medium | 6.1 | 2026-08-17 | hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module (module 34301) that allows attacker… |
CVE-2026-19970 | Medium | 6.3 | 2026-08-17 | A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the f… |
CVE-2026-19968 | Medium | 4.3 | 2026-08-17 | A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in th… |
CVE-2026-19967 | Medium | 6.3 | 2026-08-17 | A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code… |
CVE-2026-72970 | High | 8.3 | 2026-08-14 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-19385 | High | 8.8 | 2026-08-13 | Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user run… |
CVE-2026-14676 | High | 8.8 | 2026-08-13 | Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via… |
CVE-2026-14670 | High | 8.8 | 2026-08-13 | Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the da… |
CVE-2026-14669 | High | 8.8 | 2026-08-13 | Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running t… |
CVE-2026-14664 | High | 8.8 | 2026-08-13 | Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that wo… |
CVE-2026-18368 | | 2026-08-13 | In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attac… | |
CVE-2026-19694 | Medium | 4.7 | 2026-08-13 | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service |
CVE-2026-19004 | High | 8.1 | 2026-08-12 | An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Trigg… |
CVE-2024-14043 | Medium | 6.3 | 2026-08-12 | A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-pa… |
CVE-2026-73242 | Critical | 9.1 | 2026-08-11 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage fun… |
CVE-2026-71331 | High | 8.1 | 2026-08-11 | Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. |
CVE-2026-70347 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-70345 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-70330 | Medium | 6.7 | 2026-08-11 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70304 | Medium | 6.7 | 2026-08-11 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70130 | High | 8.4 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-68815 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68812 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68807 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68805 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68804 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68801 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68800 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68798 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68796 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68794 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-66810 | Medium | 5.5 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-66799 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. |
CVE-2026-65814 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-65799 | Medium | 6.7 | 2026-08-11 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65797 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65796 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65791 | Critical | 9.8 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65790 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-65787 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65786 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65774 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-65679 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65672 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
CVE-2026-65671 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
CVE-2026-65664 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65661 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64920 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64915 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64914 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64911 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64909 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64908 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64906 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64903 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64898 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63533 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63532 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63519 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63518 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63513 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62913 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
CVE-2026-62894 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-62890 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. |
CVE-2026-62886 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-62885 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62883 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |