30257 matches found
CVE-2025-57740: Heap-based Buffer Overflow
An Heap-based Buffer Overflow vulnerability CWE-122 in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions an...
CVE-2024-50571: Heap-based Buffer Overflow
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions,...
CVE-2025-20720: Heap-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID:...
CVE-2025-54282: Heap-based Buffer Overflow
Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-59254: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-55697: Heap-based Buffer Overflow
Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally...
CVE-2025-20712: Heap-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID:...
CVE-2025-59191: Heap-based Buffer Overflow
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-59242: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Adobe FrameMaker 2020 < 16.0.10 (2020.0.10) / Adobe FrameMaker 2022 < 17.0.8 (2022.0.8) Arbitrary Code Execution (APSB25-101)
The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.10 / Adobe FrameMaker 2022 17.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-101 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading ...
CVE-2025-59255: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-59295: Heap-based Buffer Overflow
Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network...
PT-2025-42154
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Windows affected versions not specified Description A heap-based buffer overflow exists in Microsoft Internet Explorer and the Windows URL Parsing component. This flaw allows a remote...
CVE-2025-22258: Heap-based Buffer Overflow
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0...
GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
...
PT-2025-46005
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
CVE-2025-11495: Heap-based Buffer Overflow
A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elfx8664relocatesection of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclos...
CVE-2025-43912
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Heap-based Buffer...
