Vulnerabilities > Heap-based Buffer Overflow

DATE CVE VULNERABILITY TITLE RISK
2025-05-27 CVE-2025-48797 A flaw was found in GIMP when processing certain TGA image files.
local
low complexity
CWE-122
7.3
2025-05-14 CVE-2025-2900 IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.
network
low complexity
CWE-122
7.5
2025-05-13 CVE-2025-30330 Heap-based Buffer Overflow vulnerability in Adobe Illustrator
Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-122
7.8
2025-05-13 CVE-2025-30388 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
local
low complexity
microsoft CWE-122
7.8
2025-05-13 CVE-2025-24063 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
local
low complexity
microsoft CWE-122
7.8
2025-05-13 CVE-2025-29962 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
network
low complexity
microsoft CWE-122
8.8
2025-05-13 CVE-2025-29963 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
network
low complexity
microsoft CWE-122
8.8
2025-05-13 CVE-2025-29964 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
network
low complexity
microsoft CWE-122
8.8
2025-05-13 CVE-2025-29966 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
network
low complexity
microsoft CWE-122
8.8
2025-05-13 CVE-2025-29967 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
network
low complexity
microsoft CWE-122
8.8