CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-11010 MEDIUM
vstakhov libucl <0.9.2 - Buffer Overflow
CVSS 5.3
CVE-2025-10997 MEDIUM
Open Babel <3.1.1 - Buffer Overflow
CVSS 5.3
CVE-2025-10996 MEDIUM
Open Babel <3.1.1 - Buffer Overflow
CVSS 5.3
CVE-2025-20363 CRITICAL
Cisco Secure Firewall - RCE
CVSS 9.0
CVE-2025-10502 HIGH
Google Chrome < 140.0.7339.185 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-23308 LOW
Nvidia Cuda Toolkit < 13.0.0 - Heap Buffer Overflow
CVSS 3.3
CVE-2025-57638 HIGH
Tenda Ac9 Firmware - Heap Buffer Overflow
CVSS 7.5
CVE-2025-57637 HIGH
Dlink Di-7100g Firmware - Heap Buffer Overflow
CVSS 7.5
CVE-2025-51005 HIGH
tcpreplay-4.5.1 - Buffer Overflow
CVSS 7.5
CVE-2025-56394 HIGH
Free5gc - Heap Buffer Overflow
CVSS 7.5
CVE-2025-7983 HIGH
Ashlar Graphite - Heap Buffer Overflow
CVSS 7.8
CVE-2025-8894 HIGH
Autodesk Autocad Plant 3D < 2024.1.8 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-55118 HIGH
Control-M/Agent <9.0.20,9.0.21,9.0.22 - Memory Corruption
CVSS 8.9
CVE-2025-58447 CRITICAL
rAthena <commit 2f5248b - Buffer Overflow
CVSS 9.8
CVE-2025-54244 HIGH
Adobe Substance 3D Viewer < 0.25.2 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-54910 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 8.4
CVE-2025-54907 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 7.8
CVE-2025-54900 HIGH
Microsoft 365 Apps < 16.0.10417.20047 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-54894 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21128 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-54113 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8422 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-54091 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21128 - Integer Overflow
CVSS 7.8
CVE-2025-9951 HIGH
FFmpeg - Buffer Overflow
CVE-2025-40930 HIGH
JSON::SIMD <1.07 - Buffer Overflow
CVSS 7.5
CVE-2025-40929 MEDIUM
Cpanel::JSON::XS <4.40 - Buffer Overflow
CVSS 5.6
CVE-2025-40928 HIGH
JSON::XS <4.04 - Buffer Overflow
CVSS 7.5
Details
Vulnerabilities 2,135
Exploit Likelihood High