CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,559 vulnerabilities with CWE-122
CVE-2026-66040 HIGH
FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
CVSS 8.8
CVE-2026-66039 HIGH
FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
CVSS 8.8
CVE-2026-66036 HIGH
FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter
CVSS 8.8
CVE-2026-66035 HIGH
libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
CVSS 7.5
CVE-2026-56392 LOW
Heap-based Buffer Overflow in GNU coreutils
CVE-2026-56165 CRITICAL
Microsoft Account Remote Code Execution Vulnerability
CVSS 9.8
CVE-2026-49035 HIGH
Stack-based Buffer Overflow in MZ Automation libIEC61850
CVSS 8.1
CVE-2026-13072 HIGH
MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption
CVSS 8.1
CVE-2026-64830 HIGH
FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
CVSS 8.8
CVE-2026-40691 HIGH
NLnet Labs Unbound - Packet of Death for DNSCrypt Over TCP
CVSS 7.5
CVE-2026-61390 HIGH
Hikvision DS-2CD Series - Buffer Overflow
CVSS 7.7
CVE-2026-8987 CRITICAL
Autel MaxiCharger Single - Authenticated Heap Overflow
CVE-2026-44178 HIGH
xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow
CVSS 8.8
CVE-2026-41252 CRITICAL
xrdp: lib_palette_update Heap Buffer Overflow & RCE
CVSS 9.8
CVE-2026-35591 HIGH
Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
CVE-2026-35590 MEDIUM
Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata
CVE-2026-63090 HIGH
ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly
CVSS 8.8
CVE-2026-64620 CRITICAL
FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common
CVSS 9.8
CVE-2026-53994 HIGH
ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation
CVSS 7.5
CVE-2026-11826 HIGH
OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()
CVSS 8.8
CVE-2026-48373 HIGH
Acrobat Reader | Heap-based Buffer Overflow (CWE-122)
CVSS 7.8
CVE-2026-16118 HIGH
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
CVSS 7.1
CVE-2026-13473 HIGH
IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow
CVSS 8.1
CVE-2026-44251 MEDIUM
Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message
CVSS 6.5
CVE-2026-40106 MEDIUM
Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)
CVSS 4.7
Details
Vulnerabilities 2,559
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits