CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-46643 LOW
Dell PowerProtect Data Domain - Buffer Overflow
CVSS 2.3
CVE-2025-67268 CRITICAL
Gpsd < 3.27.1 - Heap Buffer Overflow
CVSS 9.8
CVE-2025-15279 HIGH
Fontforge - Heap Buffer Overflow
CVSS 7.8
CVE-2025-15277 HIGH
Fontforge - Heap Buffer Overflow
CVSS 7.8
CVE-2025-15275 HIGH
Fontforge - Heap Buffer Overflow
CVSS 8.8
CVE-2025-15274 HIGH
Fontforge - Heap Buffer Overflow
CVSS 8.8
CVE-2025-15272 HIGH
Fontforge - Heap Buffer Overflow
CVSS 8.8
CVE-2025-11961 LOW
libpcap - Buffer Overflow
CVSS 1.9
CVE-2025-50343 CRITICAL
matio 1.5.28 - Memory Corruption
CVSS 9.8
CVE-2025-15247 HIGH
Gmg137 Snap7-rs - Memory Corruption
CVSS 7.3
CVE-2025-15234 HIGH
Tenda M3 Firmware - Memory Corruption
CVSS 8.8
CVE-2025-15233 HIGH
Tenda M3 Firmware - Memory Corruption
CVSS 8.8
CVE-2025-15230 HIGH
Tenda M3 Firmware - Memory Corruption
CVSS 8.8
CVE-2025-66869 HIGH
libming 0.4.8 - Buffer Overflow
CVSS 7.5
CVE-2025-66862 HIGH
BinUtils <2.26 - Buffer Overflow
CVSS 7.5
CVE-2025-14425 HIGH
GIMP - RCE
CVSS 7.8
CVE-2025-12840 HIGH
OpenEXR - RCE
CVSS 7.8
CVE-2025-12839 HIGH
Academy Software Foundation OpenEXR - RCE
CVSS 7.8
CVE-2025-12495 HIGH
Openexr < 3.4.3 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-14935 HIGH
Unidata Netcdf - Out-of-Bounds Write
CVSS 7.8
CVE-2025-14958 MEDIUM
Floooh Sokol < 2025-12-13 - Out-of-Bounds Write
CVSS 5.3
CVE-2025-14956 MEDIUM
Webassembly Binaryen < 125 - Memory Corruption
CVSS 5.3
CVE-2025-68469 LOW
Imagemagick < 7.1.1-14 - Heap Buffer Overflow
CVSS 3.3
CVE-2025-67873 MEDIUM
Capstone < 6.0.0 - Heap Buffer Overflow
CVSS 4.8
CVE-2025-9457 HIGH
Autodesk <version> - Memory Corruption
CVSS 7.8
Details
Vulnerabilities 2,135
Exploit Likelihood High