CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-5479 HIGH
Sony XAV-AX8500 - RCE
CVSS 7.5
CVE-2025-5477 HIGH
Sony XAV-AX8500 - RCE
CVSS 7.5
CVE-2025-50054 MEDIUM
Openvpn Ovpn-dco-win < 1.3.0 - Out-of-Bounds Write
CVSS 5.5
CVE-2025-6270 MEDIUM
HDF5 <1.14.6 - Buffer Overflow
CVSS 5.3
CVE-2025-6269 MEDIUM
HDF5 <1.14.6 - Buffer Overflow
CVSS 5.3
CVE-2025-20260 CRITICAL
ClamAV - Buffer Overflow
CVSS 9.8
CVE-2025-49850 HIGH
PRJ File Parser - Buffer Overflow
CVE-2025-6120 MEDIUM
Assimp < 5.4.3 - Memory Corruption
CVSS 5.3
CVE-2025-47868 CRITICAL
Apache Nuttx < 12.9.0 - Out-of-Bounds Write
CVSS 9.8
CVE-2025-32717 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 8.4
CVE-2025-47107 HIGH
Adobe Incopy < 19.5.4 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-47174 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 7.8
CVE-2025-47169 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 7.8
CVE-2025-47162 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 8.4
CVE-2025-33066 HIGH
Windows RRAS - Buffer Overflow
CVSS 8.8
CVE-2025-33064 HIGH
Windows RRAS - Buffer Overflow
CVSS 8.8
CVE-2025-32718 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21034 - Integer Overflow
CVSS 7.8
CVE-2025-32713 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21034 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-30317 HIGH
InDesign Desktop <ID20.2,ID19.5.3 - Buffer Overflow
CVSS 7.8
CVE-2025-5915 MEDIUM
Libarchive < 3.8.0 - Heap Buffer Overflow
CVSS 6.6
CVE-2025-5750 HIGH
Wolfbox Level 2 EV Charger Firmware - Heap Buffer Overflow
CVSS 8.8
CVE-2025-48910 MEDIUM
DFile - Buffer Overflow
CVSS 5.5
CVE-2025-1051 HIGH
Sonos Era 300 - RCE
CVSS 8.8
CVE-2025-48990 HIGH
NeKernal 0.0.2 - Buffer Overflow
CVE-2025-20672 CRITICAL
Mediatek Mt7902 Firmware < 3.6 - Heap Buffer Overflow
CVSS 9.8
Details
Vulnerabilities 2,135
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits