Vulnerability index

Browse CVEs

2,663 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Heap-based Buffer OverflowCWE-122 × clear
Ogre HIGH 7.8
CVE-2025-11014

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/S…

Fix: after 14.4.1
Fix from $1,950 2025-09-26
Unclassified MEDIUM 5.3
CVE-2025-11010

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_include_common of the file /src/ucl…

No fix yet
Fix from $1,600 2025-09-26
Open Babel HIGH 7.8
CVE-2025-10996

A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesfo…

Fix: after 3.1.1
Fix from $1,950 2025-09-26
Open Babel HIGH 7.8
CVE-2025-10997

A flaw has been found in Open Babel up to 3.1.1. Impacted is the function ChemKinFormat::CheckSpecies of the file /src/formats/chemkinformat.cpp. Exe…

Fix: after 3.1.1
Fix from $1,950 2025-09-26
Ios Xr CRITICAL 9.0
CVE-2025-20363EPSS 8%

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) S…

Fix: 7.0.8 / 7.2.10+
Fix from $2,300 2025-09-25
Chrome HIGH 8.8
CVE-2025-10502

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious…

Fix: 140.0.7339.185+
Fix from $1,950 2025-09-24
Cuda Toolkit HIGH 7.8
CVE-2025-23308

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the us…

Fix: 13.0.0+
Fix from $1,950 2025-09-24
Di 7100g Firmware HIGH 7.5
CVE-2025-57637

Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing attacker…

No fix yet
Fix from $1,950 2025-09-23
Ac9 Firmware HIGH 7.5
CVE-2025-57638

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.

No fix yet
Fix from $1,950 2025-09-23
Tcpreplay HIGH 7.5
CVE-2025-51005

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program inc…

No fix yet
Fix from $1,950 2025-09-23
Free5gc HIGH 7.5
CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow.

Patch available
Fix from $1,950 2025-09-23
Graphite HIGH 7.8
CVE-2025-7983

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…

Mitigation only
Fix from $1,950 2025-09-17
Autocad Plant 3d HIGH 7.8
CVE-2025-8894

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can l…

Fix: 2024.1.8 / 2025.1.3+
Fix from $1,950 2025-09-16
Unclassified HIGH 8.9
CVE-2025-55118

Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cas…

Mitigation only
Fix from $1,950 2025-09-16
Rathena CRITICAL 9.8
CVE-2025-58447

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap…

Fix: 2025-09-06+
Fix from $2,300 2025-09-09
Substance 3d Viewer HIGH 7.8
CVE-2025-54244

Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execu…

Fix: 0.25.2+
Fix from $1,950 2025-09-09
365 Apps HIGH 7.8
CVE-2025-54907

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-09-09
365 Apps HIGH 8.4
CVE-2025-54910

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $1,950 2025-09-09
365 Apps HIGH 7.8
CVE-2025-54900

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20047+
Fix from $1,950 2025-09-09
Windows 10 1507 HIGH 7.8
CVE-2025-54894

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Fix: 10.0.10240.21128 / 10.0.14393.8422+
Fix from $1,950 2025-09-09
Windows Server 2008 HIGH 8.8
CVE-2025-54113

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.8422 / 10.0.17763.7792+
Fix from $1,950 2025-09-09
Windows 10 1507 HIGH 7.8
CVE-2025-54091

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21128 / 10.0.14393.8422+
Fix from $1,950 2025-09-09
Unclassified HIGH 7.2
CVE-2025-9951

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of servi…

Mitigation only
Fix from $1,950 2025-09-09
Unclassified HIGH 7.5
CVE-2025-40930

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-s…

Patch available
Fix from $1,950 2025-09-08
Unclassified HIGH 7.5
CVE-2025-40928

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks…

Patch available
Fix from $1,950 2025-09-08
Unclassified MEDIUM 5.6
CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service…

Patch available
Fix from $1,600 2025-09-08
Unclassified HIGH 7.5
CVE-2025-36853

A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow. Per CWE-122: Heap-based Buffer Overflow, a…

Mitigation only
Fix from $1,950 2025-09-08
Imagemagick CRITICAL 9.8
CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecu…

Fix: 6.9.13-29 / 7.1.2-3+
Fix from $2,300 2025-09-05
Android HIGH 8.8
CVE-2025-32318

In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional …

Mitigation only
Fix from $1,950 2025-09-05
Android HIGH 7.8
CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege …

Patch available
Fix from $1,950 2025-09-04