CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,326 vulnerabilities with CWE-122
CVE-2025-29912 CRITICAL
CryptoLib < 1.4.0 - Heap Buffer Overflow via Telecommand Packet Frame Length Field
CVSS 9.8
CVE-2025-29911 CRITICAL
CryptoLib <= 1.3.3 - Heap-based Buffer Overflow in Crypto_AOS_ProcessSecurity
CVSS 9.8
CVE-2025-2368 MEDIUM
WebAssembly wabt 1.0.36 - Heap-Based Buffer Overflow in BinaryReaderInterp
CVSS 6.3
CVE-2025-2338 MEDIUM
matio 1.5.28 - Heap-Based Buffer Overflow in strdup_vprintf
CVSS 6.3
CVE-2025-2337 MEDIUM
matio 1.5.28 - Heap-Based Buffer Overflow in Mat_VarPrint Function
CVSS 6.3
CVE-2025-2310 MEDIUM
HDF5 1.14.6 - Heap-Based Buffer Overflow in Metadata Attribute Decoder
CVSS 5.3
CVE-2025-2309 MEDIUM
HDF5 1.14.6 - Heap-Based Buffer Overflow in Type Conversion Logic
CVSS 5.3
CVE-2025-2308 MEDIUM
HDF5 1.14.6 - Heap-Based Buffer Overflow in Scale-Offset Filter
CVSS 5.3
CVE-2025-1651 HIGH
Autodesk AutoCAD 2022 < 2022.1.6 - Heap-Based Buffer Overflow via Crafted MODEL File
CVSS 7.8
CVE-2025-1429 HIGH
AutoCAD 2022 < 2022.1.6 - Heap-Based Buffer Overflow via Malicious MODEL File
CVSS 7.8
CVE-2025-2019 HIGH
Ashlar-Vellum Cobalt - Heap-based Buffer Overflow in VC6 File Parser
CVSS 7.8
CVE-2025-27173 HIGH
Substance 3D Modeler < 1.15.0 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2025-27177 HIGH
InDesign Desktop <ID20.1,ID19.5.2 - RCE
CVSS 7.8
CVE-2025-27171 HIGH
InDesign Desktop <ID20.1,ID19.5.2 - RCE
CVSS 7.8
CVE-2025-24453 HIGH
Adobe InDesign < 19.5.3 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2025-24443 HIGH
Substance 3D Sampler < 5.0 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2025-24439 HIGH
Substance3D Sampler < 5.0 - Heap-based Buffer Overflow via Malicious File
CVSS 7.8
CVE-2025-26634 HIGH
Windows 10/11, Server 2016-2022 Authenticated Heap Overflow in Core Messaging
CVSS 7.5
CVE-2025-24995 HIGH
Kernel Streaming WOW Thunk Service Driver - Privilege Escalation
CVSS 7.8
CVE-2025-24993 HIGH KEV
Windows 10 1507-22H2 and Windows 11 22H2 - Unauthenticated Heap-based Buffer Overflow
CVSS 7.8
CVE-2025-24985 HIGH KEV
Windows Fast FAT Driver - Code Injection
CVSS 7.8
CVE-2025-24067 HIGH
Windows 10 1507-22H2, Windows 11 22H2-24H2, Windows Server 2016-2022 - Authenticated Heap-based Buffer Overflow
CVSS 7.8
CVE-2025-24066 HIGH
Windows Kernel-Mode Drivers - Heap-based Buffer Overflow
CVSS 7.8
CVE-2025-24057 HIGH
Microsoft 365 Apps and Office - Heap-based Buffer Overflow
CVSS 7.8
CVE-2025-24056 HIGH
Windows Telephony Server - Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
Details
Vulnerabilities 2,326
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits