CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,545 vulnerabilities with CWE-122
CVE-2026-42904 CRITICAL
Microsoft Windows 10 Version 21H2 - Windows TCP/IP Elevation of Privilege Vulnerability
CVSS 9.6
CVE-2026-41108 HIGH
Microsoft Windows 10 Version 1607 - Windows DNS Client Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-40404 HIGH
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-24180 HIGH
Nvidia Dali - Heap-based Buffer Overflow
CVSS 7.3
CVE-2026-11792 LOW
389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)
CVSS 3.3
CVE-2026-41981 MEDIUM
Huawei HarmonyOS - Heap-based Buffer Overflow
CVSS 5.3
CVE-2026-42536 HIGH
Apache HTTP Server: mod_xml2enc heap overflow
CVSS 7.5
CVE-2026-34356 HIGH
Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow
CVSS 7.5
CVE-2026-34355 HIGH
Apache HTTP Server: mod_proxy_html buffer overflow
CVSS 7.5
CVE-2026-22164 HIGH
Imagination Technologies Graphics DDK - GPU DDK - Kernel Heap OOB Write in DevmemIntComputeVirtualIndicesFromLogical
CVSS 7.5
CVE-2026-11143 MEDIUM
Google Chrome - Heap-based Buffer Overflow
CVSS 6.5
CVE-2026-11124 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-10995 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-10993 MEDIUM
Google Chrome - Heap-based Buffer Overflow
CVSS 6.5
CVE-2026-10989 HIGH
Google Chrome < 149.0.7827.53 - Heap Corruption via Crafted HTML Page
CVSS 8.8
CVE-2026-10949 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.3
CVE-2026-10946 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 7.5
CVE-2026-10929 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.3
CVE-2026-0100 HIGH
Google Android - Heap-based Buffer Overflow
CVSS 7.8
CVE-2026-0059 HIGH
Google Android - Heap-based Buffer Overflow
CVSS 8.0
CVE-2026-10231 MEDIUM
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow
CVSS 5.3
CVE-2026-10230 MEDIUM
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow
CVSS 5.3
CVE-2026-10229 MEDIUM
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow
CVSS 5.3
CVE-2026-20452 HIGH
MediaTek Chipset - Heap-based Buffer Overflow
CVSS 8.0
CVE-2026-10200 MEDIUM
Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow
CVSS 5.3
Details
Vulnerabilities 2,545
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits