Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-122 (堆缓冲区溢出) — Vulnerability Class 1837

1837 vulnerabilities classified as CWE-122 (堆缓冲区溢出). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-46643 Dell PowerProtect Data Domain 安全漏洞 — PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release 2.3 Low2026-01-09
CVE-2026-21504 Heap Buffer Overflow in iccDEV ToneMap Parser — iccDEV 6.6 Medium2026-01-07
CVE-2026-21491 iccDEV has unicode buffer overflow in CIccTagTextDescription — iccDEV 6.1 Medium2026-01-06
CVE-2026-21490 iccDEV has heap buffer overflow in CIccTagLut16::Validate() — iccDEV 6.1 Medium2026-01-06
CVE-2026-21494 iccDEV has heap buffer overflow in CIccTagLut8::Validate() — iccDEV 6.1 Medium2026-01-06
CVE-2026-21488 iccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination — iccDEV 6.1 Medium2026-01-06
CVE-2026-21486 Use After Free and Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write in iccDEV — iccDEV 7.8 High2026-01-06
CVE-2026-21676 iccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() function — iccDEV 8.8 High2026-01-06
CVE-2025-15279 FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — FontForge 7.8 -2025-12-31
CVE-2025-15277 FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — FontForge 7.8 -2025-12-31
CVE-2025-15275 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — FontForge 7.8 -2025-12-31
CVE-2025-15274 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — FontForge 7.8 -2025-12-31
CVE-2025-15272 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — FontForge 7.8 -2025-12-31
CVE-2025-15247 gmg137 snap7-rs client.rs download heap-based overflow — snap7-rs 7.3 High2025-12-30
CVE-2025-15234 Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow — M3 8.8 High2025-12-30
CVE-2025-15233 Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow — M3 8.8 High2025-12-30
CVE-2025-15230 Tenda M3 setVlanPolicyData formSetVlanPolicy heap-based overflow — M3 8.8 High2025-12-30
CVE-2025-12840 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — OpenEXR 7.8AIHighAI2025-12-23
CVE-2025-12839 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — OpenEXR 7.8AIHighAI2025-12-23
CVE-2025-12495 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — OpenEXR 7.8AIHighAI2025-12-23
CVE-2025-14425 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — GIMP 7.8AIHighAI2025-12-23
CVE-2025-14935 NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability — NetCDF-C 7.8AIHighAI2025-12-23
CVE-2025-14958 floooh sokol sokol_gfx.h _sg_pipeline_common_init heap-based overflow — sokol 5.3 Medium2025-12-19
CVE-2025-14956 WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow — Binaryen 5.3 Medium2025-12-19
CVE-2025-68469 ImageMagick vulnerable to heap-buffer-overflow — ImageMagick 6.5AIMediumAI2025-12-18
CVE-2025-67873 Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow — capstone 4.8 Medium2025-12-17
CVE-2025-10881 CATPRODUCT File Parsing Heap-Based Overflow Vulnerability — Shared Components 7.8 High2025-12-15
CVE-2025-9457 PRT File Parsing Memory Corruption Vulnerability — Shared Components 7.8 High2025-12-15
CVE-2025-14673 gmg137 snap7-rs client.rs as_ct_write heap-based overflow — snap7-rs 7.3 High2025-12-14
CVE-2025-14672 gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow — snap7-rs 7.3 High2025-12-14

Vulnerabilities classified as CWE-122 (堆缓冲区溢出) represent 1837 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.