CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,545 vulnerabilities with CWE-122
CVE-2026-10194 MEDIUM
OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow
CVSS 6.3
CVE-2026-44421 HIGH
FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass
CVSS 8.8
CVE-2026-44420 HIGH
FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
CVSS 8.8
CVE-2026-40528 LOW
OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
CVSS 3.8
CVE-2026-9940 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-9939 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-9926 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.3
CVE-2026-9924 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.3
CVE-2026-9915 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.3
CVE-2026-48065 MEDIUM
pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets
CVSS 6.7
CVE-2026-4391 MEDIUM
TeamSpeak 3 Server ECC Key heap-based overflow
CVSS 5.3
CVE-2026-8175 CRITICAL
IBM Aspera High-Speed Transfer Endpoint - Multiple Vulnerabilities in Aspera applications.
CVSS 9.8
CVE-2026-38427 HIGH
Tasmota through 15.3.0.3 - Heap Buffer Overflow in fetch_jpg()
CVSS 7.3
CVE-2026-9605 HIGH
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
CVSS 7.3
CVE-2026-44983 HIGH
smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow
CVSS 7.3
CVE-2026-48689 CRITICAL
Pavel-odintsov Fastnetmon < 1.2.9 - Out-of-bounds Write
CVSS 9.8
CVE-2026-8834 HIGH
IBM HTTP Server is affected by multiple vulnerabilities
CVSS 8.0
CVE-2026-48691 CRITICAL
FastNetMon Community Edition <= 1.2.9 - Heap Buffer Overflow in BGP AS_PATH Attribute Encoder
CVSS 9.8
CVE-2026-48690 HIGH
FastNetMon Community Edition <= 1.2.9 - Integer Overflow in Packet Capture Buffer Allocation
CVSS 7.1
CVE-2026-40033 HIGH
FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass
CVSS 8.8
CVE-2026-9541 MEDIUM
Squirrel Cnut File sqobject.cpp ReadObject heap-based overflow
CVSS 5.3
CVE-2026-7310 MEDIUM
Hitachi Energy Mach HiDraw < 9.22 - Heap-based Buffer Overflow
CVE-2026-48135 MEDIUM
HTTP service can incorrectly process malformed HTTP requests
CVSS 5.3
CVE-2026-48131 HIGH
VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero
CVSS 8.1
CVE-2026-25713 HIGH
Mediaarea MediaInfoLib - Heap-based Buffer Overflow
CVSS 7.8
Details
Vulnerabilities 2,545
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits