CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-47987 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Integer Overflow
CVSS 7.8
CVE-2025-47981 CRITICAL
Microsoft Windows 10 1507 < 10.0.10240.21073 - Heap Buffer Overflow
CVSS 9.8
CVE-2025-50130 HIGH
FUJI ELECTRIC CO., LTD - Buffer Overflow
CVSS 7.8
CVE-2025-20686 HIGH
Mediatek Software Development Kit < 7.6.7.2 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-20685 HIGH
Mediatek Software Development Kit < 7.6.7.2 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-20680 CRITICAL
Mediatek Nbiot SDK < 3.6 - Heap Buffer Overflow
CVSS 9.8
CVE-2025-53184 MEDIUM
Huawei Harmonyos - Heap Buffer Overflow
CVSS 6.5
CVE-2025-53183 MEDIUM
Huawei Harmonyos - Heap Buffer Overflow
CVSS 6.5
CVE-2025-53182 MEDIUM
Huawei Harmonyos - Heap Buffer Overflow
CVSS 6.5
CVE-2025-53181 MEDIUM
Huawei Harmonyos - Heap Buffer Overflow
CVSS 6.5
CVE-2025-53180 MEDIUM
Huawei Harmonyos - Heap Buffer Overflow
CVSS 6.5
CVE-2025-53179 MEDIUM
Huawei Harmonyos - Heap Buffer Overflow
CVSS 6.5
CVE-2025-7069 LOW
Hdfgroup Hdf5 - Memory Corruption
CVSS 3.3
CVE-2025-7067 LOW
Hdfgroup Hdf5 - Memory Corruption
CVSS 3.3
CVE-2025-45029 MEDIUM
WINSTAR WN572HP3 v230525 - Buffer Overflow
CVSS 6.5
CVE-2025-48379 HIGH
Pillow <11.3.0 - Buffer Overflow
CVSS 7.1
CVE-2025-6818 LOW
HDF5 1.14.6 - Buffer Overflow
CVSS 3.3
CVE-2025-6816 LOW
HDF5 1.14.6 - Buffer Overflow
CVSS 3.3
CVE-2025-6750 LOW
Hdfgroup Hdf5 - Memory Corruption
CVSS 3.3
CVE-2025-6660 HIGH
Pdf-xchange Pdf-tools - Heap Buffer Overflow
CVSS 7.8
CVE-2025-5830 HIGH
Autel MaxiCharger AC Wallbox Commercial - RCE
CVSS 8.8
CVE-2025-6516 MEDIUM
HDF5 <1.14.6 - Buffer Overflow
CVSS 5.3
CVE-2025-6499 LOW
Vstakhov Libucl < 0.9.2 - Out-of-Bounds Write
CVSS 3.3
CVE-2025-6494 LOW
Rubygems Nokogiri - Memory Corruption
CVSS 3.3
CVE-2025-6490 LOW
Rubygems Nokogiri - Memory Corruption
CVSS 3.3
Details
Vulnerabilities 2,135
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits