CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,545 vulnerabilities with CWE-122
CVE-2026-33298 HIGH
llama.cpp <b7824 GGUF Tensor Parsing - Heap Buffer Overflow
CVSS 7.8
CVE-2026-33164 HIGH
NULL Pointer Dereference in libde265
CVSS 7.5
CVE-2026-32710 HIGH
Heap-based Buffer Overflow in MariaDB
CVSS 8.5
CVE-2026-32945 CRITICAL
PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser
CVSS 9.8
CVE-2026-4463 HIGH
Google Chrome < 146.0.7680.153 - Heap-based Buffer Overflow in WebRTC
CVSS 8.8
CVE-2026-4455 HIGH
Google Chrome < 146.0.7680.153 - Heap-based Buffer Overflow in PDFium via Crafted PDF File
CVSS 8.8
CVE-2026-4448 HIGH
Google Chrome < 146.0.7680.153 - Heap-based Buffer Overflow in ANGLE via Crafted HTML Page
CVSS 8.8
CVE-2026-4443 HIGH
Google Chrome < 146.0.7680.153 - Remote Code Execution via WebAudio Heap Buffer Overflow
CVSS 8.8
CVE-2026-4442 HIGH
Google Chrome < 146.0.7680.153 - Heap-based Buffer Overflow in CSS
CVSS 8.8
CVE-2026-4395 CRITICAL
Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path
CVSS 9.8
CVE-2026-3549 CRITICAL
wolfSSL < 5.9.0 - Heap Buffer Overflow in TLS 1.3 ECH Parsing
CVSS 9.8
CVE-2026-3229 MEDIUM
Integer Overflow in Certificate Chain Allocation
CVSS 5.5
CVE-2026-3548 CRITICAL
Buffer overflow in CRL number parsing in wolfSSL
CVSS 9.8
CVE-2026-2646 HIGH
Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function
CVSS 8.1
CVE-2026-31971 HIGH
HTSlib CRAM decoder vulnerable to buffer overflow
CVSS 8.1
CVE-2026-31970 HIGH
HTSlib BGZF GZI Index - Heap Buffer Overflow
CVSS 8.1
CVE-2026-31969 HIGH
HTSlib CRAM BYTE_ARRAY_STOP - Heap Buffer Overflow
CVSS 8.1
CVE-2026-31968 HIGH
HTSlib CRAM decoder vulnerable to buffer overflow
CVSS 8.1
CVE-2026-31963 HIGH
HTSlib CRAM reader has heap buffer overflow due to improper validation of input
CVSS 8.1
CVE-2026-31962 HIGH
HTSlib CRAM reader has heap buffer overflow due to improper validation of input
CVSS 8.8
CVE-2026-4177 CRITICAL
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter
CVSS 9.1
CVE-2026-3561 HIGH
Philips Hue Bridge - Heap-based Buffer Overflow RCE
CVSS 8.0
CVE-2026-3560 HIGH
Philips Hue Bridge - Buffer Overflow RCE
CVSS 8.8
CVE-2026-3557 HIGH
Philips Hue Bridge - Heap-based Buffer Overflow RCE
CVSS 8.0
CVE-2026-3556 HIGH
Philips Hue Bridge - Buffer Overflow RCE
CVSS 8.8
Details
Vulnerabilities 2,545
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits