CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,559 vulnerabilities with CWE-122
CVE-2026-54715 HIGH
GoAccess: Heap Out-of-Bounds Write in parse_browser()
CVE-2026-51272 CRITICAL
ESP32-audioI2S 3.4.5 - Heap-Based Buffer Overflow in latinToUTF8 Character Encoding Conversion
CVSS 9.8
CVE-2026-17951 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-17935 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-17758 CRITICAL
Google Chrome - Heap-based Buffer Overflow
CVSS 9.6
CVE-2026-17680 CRITICAL
Google Chrome - Heap-based Buffer Overflow
CVSS 9.6
CVE-2026-13307 MEDIUM
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
CVSS 6.8
CVE-2026-14266 HIGH
7-Zip XZ Decompression - Heap-Based Buffer Overflow Remote Code Execution
CVSS 7.0
CVE-2026-67191 CRITICAL
Xlight FTP Server < 3.9.5 Pre-Auth Heap Buffer Overflow via SSH Parser
CVSS 9.8
CVE-2026-16463 HIGH
DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD
CVSS 7.8
CVE-2026-48372 HIGH
Format Plugins | Heap-based Buffer Overflow (CWE-122)
CVSS 7.8
CVE-2026-51275 HIGH
ESP32-audioI2S 3.4.5 - Remote Code Execution and Denial of Service via ID3v2 APIC Frame Heap-Based Buffer Overflow
CVSS 8.8
CVE-2026-51274 HIGH
ESP32-audioI2S 3.4.5 - Heap-Based Buffer Overflow and Remote Code Execution via ID3v2 SYLT Lyrics Parser
CVSS 8.8
CVE-2026-51273 HIGH
ESP32-audioI2S 3.4.5 - Heap-Based Buffer Overflow and Remote Code Execution via ID3 Tag Parsing in showID3Tag()
CVSS 7.8
CVE-2026-51271 CRITICAL
ESP32-audioI2S 3.4.5 - Heap-Based Buffer Overflow and Remote Code Execution via WAV Header Parsing
CVSS 9.6
CVE-2026-51270 HIGH
ESP32-audioI2S 3.4.5 - Remote Code Execution via Heap-Based Buffer Overflow in htmlToUTF8 HTML Entity Decoder
CVSS 8.8
CVE-2026-51269 HIGH
ESP32-audioI2S 3.4.5 - Remote Code Execution via Heap-Based Buffer Overflow in connecttospeech() TTS Input
CVSS 8.8
CVE-2026-51268 CRITICAL
ESP32-audioI2S 3.4.5 - Heap-Based Buffer Overflow via Host Parsing in dismantle_host() Function
CVSS 9.8
CVE-2026-51267 CRITICAL
ESP32-audioI2S 3.4.5 - Remote Code Execution via URL Path and Query String Length Overflow in urlencode
CVSS 9.8
CVE-2026-51266 CRITICAL
ESP32-audioI2S 3.4.5 - Remote Code Execution via Oversized HTTP Request Header Construction
CVSS 9.8
CVE-2026-51263 CRITICAL
ESP32-audioI2S 3.4.5 - Unauthenticated Heap Buffer Overflow via openai_speech JSON Request Construction
CVSS 9.8
CVE-2026-51260 CRITICAL
ESP32-audioI2S 3.4.5 - Remote Heap Buffer Overflow via Unsafe memcpy in AudioBuffer::writeSpace
CVSS 9.4
CVE-2026-51259 CRITICAL
ESP32-audioI2S 3.4.5 Heap Buffer Overflow & RCE via Integer Overflow in Buffer Size
CVSS 9.8
CVE-2026-51235 HIGH
LibRaw 0.21 - Buffer Overflow in stretch() and fuji_rotate() Functions
CVSS 8.8
CVE-2026-55971 CRITICAL
Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()
CVSS 9.8
Details
Vulnerabilities 2,559
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits