CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-0999 HIGH
Google Chrome < 133.0.6943.126 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-0633 MEDIUM
iniparser - Buffer Overflow
CVE-2025-22920 MEDIUM
FFmpeg <4bf784c - Buffer Overflow
CVSS 5.3
CVE-2025-1052 HIGH
Mintty - RCE
CVSS 8.8
CVE-2025-0903 HIGH
Pdf-xchange Editor < 10.4.2.390 - Out-of-Bounds Write
CVSS 8.8
CVE-2025-21418 HIGH KEV
Microsoft Windows 10 1607 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-21414 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 7.0
CVE-2025-21410 HIGH
Microsoft Windows Server 2008 < 10.0.14393.7785 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21407 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21390 HIGH
Microsoft 365 Apps < 16.0.10416.20058 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-21376 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Race Condition
CVSS 8.1
CVE-2025-21375 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-21371 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21369 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Integer Overflow
CVSS 8.8
CVE-2025-21368 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21208 HIGH
Microsoft Windows Server 2008 < 10.0.14393.7785 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21200 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21190 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-21184 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Heap Buffer Overflow
CVSS 7.0
CVE-2025-21123 HIGH
Adobe Indesign < 19.5.2 - Out-of-Bounds Write
CVSS 7.8
CVE-2025-1176 MEDIUM
GNU Binutils - Memory Corruption
CVSS 5.0
CVE-2025-22880 HIGH
Deltaww Cncsoft-g2 < 2.1.0.20 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-0870 MEDIUM
Axiosys Bento4 < 1.6.0-641 - Out-of-Bounds Write
CVSS 5.6
CVE-2025-0662 MEDIUM
Kernel < unknown - Info Disclosure
CVSS 4.9
CVE-2025-0753 MEDIUM
Axiomatic Bento4 <1.6.0 - Buffer Overflow
CVSS 6.3
Details
Vulnerabilities 2,135
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits