CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,758 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 22 of 76
- CVE-2024-28935HIGHCVSS 8.8EG 8.82024-04-09
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28932HIGHCVSS 8.8EG 8.82024-04-09
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28927HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28926HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28915HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28914HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28913HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28912HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28911HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28910HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28909HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28908HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-28906HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26214HIGHCVSS 8.8EG 8.82024-04-09
Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
- CVE-2024-26210HIGHCVSS 8.8EG 8.82024-04-09
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26205HIGHCVSS 8.8EG 8.82024-04-09
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-26200HIGHCVSS 8.8EG 8.82024-04-09
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-26179HIGHCVSS 8.8EG 8.82024-04-09
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-26166HIGHCVSS 8.8EG 8.82024-03-12
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26161HIGHCVSS 8.8EG 8.82024-03-12
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26159HIGHCVSS 8.8EG 8.82024-03-12
Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2023-46426HIGHCVSS 8.8EG 8.82024-03-09
Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file.c.
- CVE-2024-21802HIGHCVSS 8.8EG 8.82024-02-26
A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger thi…
- CVE-2024-21370HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21369HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21368HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21367HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21366HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21365HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21361HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21360HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21359HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21358HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21353HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
- CVE-2024-21349HIGHCVSS 8.8EG 8.82024-02-13
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
- CVE-2024-21345HIGHCVSS 8.8EG 8.82024-02-13
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-25448HIGHCVSS 8.8EG 8.82024-02-09
An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.
- CVE-2023-35639HIGHCVSS 8.8EG 8.82023-12-12
Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2023-35630HIGHCVSS 8.8EG 8.82023-12-12
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- CVE-2023-36423HIGHCVSS 8.8EG 8.82023-11-14
Microsoft Remote Registry Service Remote Code Execution Vulnerability
- CVE-2023-36402HIGHCVSS 8.8EG 8.82023-11-14
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36400HIGHCVSS 8.8EG 8.82023-11-14
Windows HMAC Key Derivation Elevation of Privilege Vulnerability
- CVE-2023-5686HIGHCVSS 8.8EG 8.82023-10-20
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- CVE-2023-36577HIGHCVSS 8.8EG 8.82023-10-10
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2023-38147HIGHCVSS 8.8EG 8.82023-09-12
Windows Miracast Wireless Display Remote Code Execution Vulnerability
- CVE-2023-4353HIGHCVSS 8.8EG 8.82023-08-15
Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2023-2905HIGHCVSS 8.8EG 8.82023-08-09
Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability …
- CVE-2023-35302HIGHCVSS 8.8EG 8.82023-07-11
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- CVE-2023-29372HIGHCVSS 8.8EG 8.82023-06-14
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2023-29362HIGHCVSS 8.8EG 8.82023-06-14
Remote Desktop Client Remote Code Execution Vulnerability
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →