CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-54268 HIGH
Adobe Bridge < 14.1.9 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-61804 HIGH
Adobe Animate < 23.0.15 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-54282 HIGH
Adobe Framemaker < 2020.10 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-59295 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21161 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-59275 HIGH
Windows Authentication Methods - Privilege Escalation
CVSS 7.8
CVE-2025-59255 HIGH
Microsoft Windows 10 1809 < 10.0.17763.7919 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-59254 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21161 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-59242 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21161 - Integer Underflow
CVSS 7.8
CVE-2025-59191 HIGH
Microsoft Windows 10 1809 < 10.0.17763.7919 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-58725 HIGH
Windows COM - Buffer Overflow
CVSS 7.0
CVE-2025-58722 HIGH
Windows DWM - Privilege Escalation
CVSS 7.8
CVE-2025-55697 HIGH
Azure Local - Privilege Escalation
CVSS 7.8
CVE-2025-57740 HIGH
Fortinet Fortiproxy < 7.4.4 - Heap Buffer Overflow
CVSS 7.5
CVE-2025-22258 MEDIUM
Fortinet <7.6.2 - Privilege Escalation
CVSS 6.5
CVE-2025-20720 HIGH
Mediatek Software Development Kit < 7.6.7.2 - Out-of-Bounds Write
CVSS 8.8
CVE-2025-20712 HIGH
Mediatek Software Development Kit < 8.3.1.1 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-11495 LOW
GNU Binutils - Memory Corruption
CVSS 3.3
CVE-2025-43912 MEDIUM
Dell Data Domain Operating System < 7.10.1.70 - Heap Buffer Overflow
CVSS 5.3
CVE-2025-11277 MEDIUM
Open Asset Import Library Assimp 6.0.2 - Buffer Overflow
CVSS 5.3
CVE-2025-11275 MEDIUM
Open Asset Import Library Assimp 6.0.2 - Buffer Overflow
CVSS 5.3
CVE-2025-10504 MEDIUM
ABB Terra AC <1.8.33 - Buffer Overflow
CVSS 6.1
CVE-2025-11083 MEDIUM
GNU Binutils <2.45 - Buffer Overflow
CVSS 5.3
CVE-2025-11082 MEDIUM
GNU Binutils <2.45 - Buffer Overflow
CVSS 5.3
CVE-2025-59938 MEDIUM
Wazuh < 4.11.0 - Heap Buffer Overflow
CVSS 6.5
CVE-2025-11014 MEDIUM
OGRECave Ogre <14.4.1 - Buffer Overflow
CVSS 5.3
Details
Vulnerabilities 2,135
Exploit Likelihood High