CWE-122 Heap-based Buffer Overflow
Description
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Associated Reviewed Advisories
Vulnerabilities classified under CWE-122 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-5gjq-3f94-rcf7 | CVE-2026-105016 | CRITICAL |
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability |
2026-10-13 | |
| GHSA-2j8r-3c22-8565 | CVE-2026-69522 | HIGH |
Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability |
2026-09-09 | |
| GHSA-527h-q9f6-p7qx | CVE-2026-69439 | HIGH |
Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability |
2026-09-09 | |
| GHSA-mqvm-gmc4-6rv2 | - | HIGH |
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability |
2026-09-09 | |
| GHSA-63gh-g2x5-x69v | CVE-2026-71328 | HIGH |
Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability |
2026-09-09 | |
| GHSA-4qhr-qf46-fcrx | - | HIGH |
Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability |
2026-09-09 | |
| GHSA-rgj7-g3m4-5g8c | - | HIGH |
sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 |
2026-09-08 | |
| GHSA-q72m-f2r4-w4cw | - | HIGH |
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability |
2026-09-08 | |
| GHSA-vg44-h755-9hw7 | CVE-2026-62871 | HIGH |
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability |
2026-08-11 | |
| GHSA-jqhp-238x-qhgf | CVE-2026-62886 | HIGH |
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability |
2026-08-11 | |
| GHSA-76q6-2p6h-xjqr | - | LOW |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title |
2026-07-24 |
| GHSA-x2f5-4prf-w687 | CVE-2026-54696 | LOW |
Ruby json: JSON generator heap buffer overflow when streaming to an IO |
2026-07-23 | |
| GHSA-56r5-2p2f-7cxp | CVE-2026-54559 | MODERATE |
PocketSphinx: Buffer overflows in language and acoustic model loading code |
2026-07-17 | |
| GHSA-4r2x-xpjr-7cvv | CVE-2026-22778 | CRITICAL |
vLLM has RCE In Video Processing |
2026-07-17 | |
| GHSA-8f95-v3jq-cj86 | CVE-2026-53720 | MODERATE |
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small |
2026-07-09 | |
| GHSA-8x9c-mqxv-q2pp | CVE-2026-35433 | HIGH |
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability |
2026-07-08 | |
| GHSA-5pmv-rx8r-wmv5 | CVE-2026-52834 | HIGH | - |
jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow |
2026-07-02 |
| GHSA-5rff-8f7c-8jmw | CVE-2022-46290 | HIGH |
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) |
2026-07-01 | |
| GHSA-wj42-v2p3-fq2w | - | CRITICAL |
Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) |
2026-07-01 | |
| GHSA-rj4c-r689-cm87 | CVE-2022-46289 | HIGH |
Open Babel has out-of-bounds write in ORCA nAtoms parser |
2026-07-01 | |
| GHSA-g8f4-g673-rfw2 | - | CRITICAL |
Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser |
2026-07-01 | |
| GHSA-8wq6-qh76-wpv9 | CVE-2025-10997 | HIGH |
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies |
2026-07-01 | |
| GHSA-44cp-c3ww-9rv5 | CVE-2026-53465 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image |
2026-06-26 |
| GHSA-4v89-6mgq-6rgc | CVE-2026-48994 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems |
2026-06-25 |
| GHSA-35w3-pjm6-wj95 | CVE-2026-54896 | HIGH |
Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent |
2026-06-19 |