Skip to content
Threat Feed

Tag

Heap-Overflow

35 briefs RSS
high advisory

Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent (CVE-2026-54896)

The `Oj.dump` function in the Ruby `oj` gem, when operating in object mode, is vulnerable to a heap buffer overflow (CVE-2026-54896) when serializing `Exception` objects with an excessively large `:indent` value, leading to memory corruption and potential denial of service or remote code execution.

oj gem ruby vulnerability heap-overflow
2r 2t
critical advisory

strongSwan 5.9.13 libsimaka EAP-SIM/AKA Heap Buffer Overflow Vulnerability

A remote exploit is available for strongSwan 5.9.13 exploiting a heap buffer overflow in the libsimaka EAP-SIM/AKA module (CVE-2026-35330), enabling pre-authentication exploitation via a malformed EAP-SIM/AKA payload.

strongSwan <= 5.9.13 strongSwan heap-overflow eap-sim eap-aka CVE-2026-35330 exploit
2r 1t
high advisory

DICOM Heap Overflow in Orthanc Server

A heap overflow vulnerability exists within the DICOM file format, potentially allowing an attacker to target an Orthanc server during image uploads, leading to an out-of-bounds write.

Orthanc +2 dicom heap overflow medical imaging
2r
high advisory

CVE-2026-28764: MediaArea MediaInfoLib LXF Element Parsing Heap-Based Buffer Overflow

A heap-based buffer overflow vulnerability exists in MediaArea MediaInfoLib's handling of LXF elements, potentially leading to arbitrary code execution when processing maliciously crafted media files; assigned CVE-2026-28764, CVSS 7.8.

MediaInfoLib cve buffer-overflow mediainfo heap-overflow cwe-823
2r 1c
high advisory

CVE-2026-42944: Heap Overflow with Multiple NSID, COOKIE, and PADDING EDNS Options

Microsoft disclosed CVE-2026-42944, a heap overflow vulnerability related to the processing of multiple NSID, COOKIE, and PADDING EDNS options in an unspecified product.

cve heap-overflow dns edns denial-of-service
2r 3t 1c
critical advisory

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVE-2009-3459)

Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability, tracked as CVE-2009-3459, that could allow remote attackers to execute arbitrary code via a crafted PDF file.

Acrobat +1 cve-2009-3459 adobe heap overflow remote code execution
2r 1t 1c
critical advisory

CVE-2026-45584 - Microsoft Defender Heap-based Buffer Overflow RCE

CVE-2026-45584 is a heap-based buffer overflow vulnerability in Microsoft Defender that allows an unauthorized attacker to execute arbitrary code over a network.

Defender cve-2026-45584 heap-overflow rce microsoft-defender
2r 1t 1c
high advisory

ImageMagick Magick.NET Heap Buffer Overflow Vulnerability (CVE-2026-46520)

A heap buffer over-write vulnerability exists in ImageMagick's IPL decoder when processing multiple images of different dimensions, affecting Magick.NET packages prior to version 14.13.1 and potentially leading to arbitrary code execution.

Magick.NET-Q16-AnyCPU +17 heap-overflow image-processing cve
2r 1t
critical threat

CVE-2026-44662 rust-openssl Heap Buffer Overflow Vulnerability

CVE-2026-44662 is a critical heap buffer overflow vulnerability in rust-openssl during encryption with AES key-wrap-with-padding, potentially leading to arbitrary code execution or denial of service.

heap-overflow rust-openssl cryptography
2r 1t 1c
high advisory

Siemens Simcenter Femap Heap-Based Buffer Overflow RCE

A heap-based buffer overflow vulnerability in Siemens Simcenter Femap, tracked as CVE-2025-12659, can be exploited by tricking a user into opening a malicious IPT file, leading to remote code execution.

Simcenter Femap cve-2025-12659 heap overflow remote code execution siemens critical manufacturing
2r 1t 1c
high threat

CVE-2026-42945: NGINX ngx_http_rewrite_module Heap Buffer Overflow

NGINX Plus and NGINX Open Source are vulnerable to a heap buffer overflow (CVE-2026-42945) due to crafted HTTP requests when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed PCRE capture with a replacement string that includes a question mark, potentially leading to denial of service or code execution.

NGINX Plus +1 cve CVE-2026-42945 nginx heap overflow denial of service webserver
2r 3t 1c
high threat

CVE-2026-0264 PAN-OS Heap-Based Buffer Overflow in DNS Proxy Allows RCE

CVE-2026-0264 is a heap-based buffer overflow vulnerability in Palo Alto Networks PAN-OS DNS proxy and DNS server features, allowing an unauthenticated attacker with network access to cause denial of service or potentially execute arbitrary code by sending crafted network traffic.

exploited PAN-OS 12.1 +3 cve heap-overflow rce dos network
2r 2t
high advisory

CVE-2026-42831 Heap-based Buffer Overflow in Microsoft Office

CVE-2026-42831 is a heap-based buffer overflow vulnerability in Microsoft Office, allowing a local attacker to execute arbitrary code with a CVSS score of 7.8.

Office cve heap overflow microsoft office code execution
1r 1t 1c
high advisory

CVE-2026-40407 - Windows CLFS Driver Heap Overflow for Privilege Escalation

CVE-2026-40407 is a heap-based buffer overflow vulnerability in the Windows Common Log File System (CLFS) Driver, enabling a locally authenticated attacker to escalate privileges on the system.

Windows Common Log File System Driver privilege-escalation heap-overflow windows
2r 1t 1c
high advisory

CVE-2026-40403 Heap-based Buffer Overflow in Windows Win32K - GRFX

CVE-2026-40403 is a heap-based buffer overflow vulnerability in Windows Win32K - GRFX that allows an authorized local attacker to execute arbitrary code, potentially leading to privilege escalation and code execution.

Windows Win32K - GRFX heap-overflow code-execution windows
2r 2t
high advisory

CVE-2026-35421 Heap-Based Buffer Overflow in Windows GDI

CVE-2026-35421 is a heap-based buffer overflow vulnerability in Windows Graphics Device Interface (GDI) that allows an unauthorized attacker to execute arbitrary code locally with elevated privileges.

Windows GDI heap-overflow code-execution windows
2r 2t 1c
critical advisory

CVE-2026-34329 Heap-Based Buffer Overflow in Windows Message Queuing

CVE-2026-34329 is a heap-based buffer overflow in Windows Message Queuing, enabling an unauthenticated attacker on an adjacent network to achieve remote code execution.

Message Queuing cve-2026-34329 rce heap-overflow msmq
2r 1t 1c
high threat

barebox EFI PE Loader Memory-Safety Vulnerabilities (CVE-2026-34963)

barebox versions prior to 2026.04.0 are vulnerable to memory-safety issues in the EFI PE loader (CVE-2026-34963), potentially allowing code execution via malicious EFI PE binaries.

barebox memory-safety heap-overflow bootloader
1r 1t 1c
critical advisory

BusyBox DHCPv6 Client Heap Buffer Overflow Vulnerability (CVE-2026-29004)

A heap buffer overflow vulnerability in BusyBox's DHCPv6 client allows network-adjacent attackers to trigger memory corruption, denial of service, or arbitrary code execution via crafted DHCPv6 responses.

BusyBox heap-overflow dhcpv6 cve-2026-29004 denial-of-service
2r 2t 1c
critical advisory

CVE-2026-7339: Heap Buffer Overflow in WebRTC

A heap buffer overflow vulnerability exists in the WebRTC component of Google Chrome and Microsoft Edge (Chromium-based), potentially leading to code execution.

Chrome +1 webrtc heap-overflow code-execution cve-2026-7339
2r 1c
critical advisory

Chromium Heap Buffer Overflow Vulnerability (CVE-2026-7353)

CVE-2026-7353 is a heap buffer overflow vulnerability in the Skia graphics library used by Chromium, affecting both Google Chrome and Microsoft Edge.

Chrome +1 heap overflow chromium cve-2026-7353
2r 2t 1c
high advisory

NTFS-3G Heap Buffer Overflow Vulnerability (CVE-2026-40706)

A heap buffer overflow vulnerability exists in NTFS-3G versions 2022.10.3 before 2026.2.25 that allows for heap memory corruption by processing a crafted NTFS image with multiple ACCESS_DENIED ACEs containing WRITE_OWNER from distinct group SIDs.

ntfs-3g heap-overflow privilege-escalation linux
2r 1t 1c
critical advisory

Creolabs Gravity Heap Buffer Overflow Vulnerability (CVE-2026-40504)

Creolabs Gravity before 0.9.6 is vulnerable to a heap buffer overflow in the gravity_vm_exec function, allowing attackers to achieve arbitrary code execution by crafting scripts with many string literals at global scope that exploit insufficient bounds checking in gravity_fiber_reassign().

cve heap-overflow code-execution
2r 3t 1c
high advisory

Adobe InDesign Heap-Based Buffer Overflow Vulnerability (CVE-2026-34629)

Adobe InDesign versions 20.5.2, 21.2 and earlier are vulnerable to a heap-based buffer overflow (CVE-2026-34629) that could lead to arbitrary code execution if a user opens a malicious file.

cve-2026-34629 heap-overflow adobe-indesign
2r 2t 1c
high advisory

CVE-2026-32087 Function Discovery Service Privilege Escalation

CVE-2026-32087 is a heap-based buffer overflow vulnerability in the Function Discovery Service (fdwsd.dll) that allows an authorized local attacker to elevate privileges on a Windows system.

privilege-escalation heap-overflow cve windows
2r 1t 1c
high advisory

Fortinet FortiAnalyzer and FortiManager Cloud Heap-Based Buffer Overflow Vulnerability (CVE-2026-22828)

CVE-2026-22828 is a heap-based buffer overflow in Fortinet FortiAnalyzer and FortiManager Cloud versions 7.6.2 through 7.6.4, potentially allowing a remote unauthenticated attacker to execute arbitrary code with a significant preparation effort due to ASLR and network segmentation.

cve-2026-22828 fortinet heap-overflow cloud
2r 2t 1c
high advisory

OpenEXR DWA Lossy Decoder Heap Out-of-Bounds Write Vulnerability

A heap out-of-bounds write vulnerability exists in OpenEXR's DWA lossy decoder due to integer overflow during block pointer calculation, triggered via crafted DWAA files, leading to crashes during DCT execution.

openexr heap-overflow dwaa cve-2026-34589
2r 1t 1c 1i
high advisory

LibRaw Heap-Based Buffer Overflow Vulnerability (CVE-2026-24660)

A heap-based buffer overflow vulnerability (CVE-2026-24660) exists in the x3f_load_huffman functionality of LibRaw commit d20315b, where a specially crafted malicious file can lead to a heap buffer overflow.

libraw heap-overflow cve-2026-24660
2r 1t 1c
high threat

Qualcomm IOCTL Memory Corruption Vulnerability

A memory corruption vulnerability (CVE-2026-21372) exists when processing IOCTL requests with invalid buffer sizes leading to a heap-based buffer overflow, reported by Qualcomm with a CVSS v3.1 score of 7.8.

Qualcomm cve-2026-21372 memory-corruption heap-overflow ioctl
2r 1t 1c
high advisory

Hirschmann HiLCOS Web Interface Heap Overflow Vulnerability (CVE-2024-14033)

A heap overflow vulnerability in the HiLCOS web interface of Hirschmann Industrial IT products (CVE-2024-14033) allows unauthenticated remote attackers to cause a denial-of-service condition by sending specially crafted requests, leading to device crashes and service disruption, particularly when the Public Spot functionality is enabled.

cve-2024-14033 denial-of-service heap-overflow hilcos
2r 1t 1c
critical advisory

Google Chrome WebAudio Heap Buffer Overflow Vulnerability (CVE-2026-4673)

A remote attacker can exploit a heap buffer overflow vulnerability (CVE-2026-4673) in Google Chrome's WebAudio component before version 146.0.7680.165 by crafting a malicious HTML page, potentially leading to an out-of-bounds memory write and arbitrary code execution.

cve-2026-4673 chrome webaudio heap overflow code execution
2r 1t
critical threat

QEMU Hypervisor Escape via virtio-snd 0-Day

An unpatched vulnerability in QEMU's virtio-snd component allows for a hypervisor escape due to an uncontrolled heap overflow.

virtualization hypervisor qemu virtio-snd heap overflow hypervisor escape
2r 2t
high advisory

CVE-2026-41445 KissFFT Integer Overflow leads to Heap Buffer Overflow

CVE-2026-41445 is a reported integer overflow vulnerability in the KissFFT library that could lead to a heap buffer overflow.

integer-overflow heap-overflow kissfft
1r 1t 1c
critical advisory

Microsoft Word RTF Heap Overflow Vulnerability (CVE-2023-21716)

CVE-2023-21716 is a critical heap-based buffer overflow vulnerability in Microsoft Word 2016's RTF parser, triggered by a malformed RTF file, leading to remote code execution on Windows 7.

Word 2016 cve-2023-21716 rtf heap overflow remote code execution
2r 1t 1c
high advisory

GnuTLS DTLS Handshake Heap Overflow Vulnerability (CVE-2026-33846)

A heap buffer overflow vulnerability, CVE-2026-33846, exists in the DTLS handshake fragment reassembly logic of GnuTLS, allowing unauthenticated remote attackers to cause application crashes or potential memory corruption by sending crafted DTLS fragments with conflicting message lengths.

GnuTLS cve-2026-33846 dtls heap overflow network
2r 1t 1c