CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,545 vulnerabilities with CWE-122
CVE-2026-15165 MEDIUM
Heap-based Buffer Overflow in Wireshark
CVSS 5.5
CVE-2026-15164 MEDIUM
Heap-based Buffer Overflow in ciscodump
CVSS 5.5
CVE-2026-56003 HIGH
libXfont2 computeProps Property Buffer Heap Buffer Overflow
CVSS 8.5
CVE-2026-56002 HIGH
libXfont2 PCF Font Parsing Heap Buffer Overflow
CVSS 8.5
CVE-2026-56001 HIGH
libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
CVSS 8.5
CVE-2026-55999 HIGH
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
CVSS 8.5
CVE-2026-58471 MEDIUM
GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c
CVSS 5.9
CVE-2026-14940 MEDIUM
389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn
CVSS 5.3
CVE-2026-11610 HIGH
389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind
CVSS 8.8
CVE-2026-14759 LOW
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
CVSS 3.3
CVE-2026-56645 HIGH
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-14610 MEDIUM
Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow
CVSS 5.3
CVE-2026-14355 MEDIUM
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
CVSS 5.6
CVE-2026-58379 HIGH
Gimp: gimp: heap buffer overflow in read_channel_data()
CVSS 7.3
CVE-2026-14427 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.3
CVE-2026-14415 HIGH
Google Chrome < 150.0.7871.46 - Heap Corruption via Crafted HTML Page
CVSS 8.8
CVE-2026-14385 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-20462 MEDIUM
MediaTek Chipset - Heap-based Buffer Overflow
CVSS 6.7
CVE-2026-54896 LOW
Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent
CVE-2026-54696 LOW
Ruby JSON: JSON generator heap buffer overflow when streaming to an IO
CVSS 3.7
CVE-2026-13976 MEDIUM
Google Chrome - Heap-based Buffer Overflow
CVSS 5.8
CVE-2026-13884 HIGH
Google Chrome - Heap-based Buffer Overflow
CVSS 8.8
CVE-2026-13835 HIGH
Google Chrome < 150.0.7871.47 - Remote Code Execution via XML Heap Corruption
CVSS 8.8
CVE-2026-13798 CRITICAL
Google Chrome - Heap-based Buffer Overflow
CVSS 9.6
CVE-2026-51219 MEDIUM
lib60870 2.3.3-2.3.6 - Denial of Service via HighPriorityASDUQueue_hasUnconfirmedIMessages Heap Overflow
CVSS 6.5
Details
Vulnerabilities 2,545
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits