Common Weakness Enumeration

CWE-122 Heap-based Buffer Overflow

Description

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Associated Reviewed Advisories

Vulnerabilities classified under CWE-122 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-5gjq-3f94-rcf7 CVE-2026-105016 CRITICAL

Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability

2026-10-13
GHSA-2j8r-3c22-8565 CVE-2026-69522 HIGH

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

2026-09-09
GHSA-527h-q9f6-p7qx CVE-2026-69439 HIGH

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

2026-09-09
GHSA-mqvm-gmc4-6rv2 - HIGH

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

2026-09-09
GHSA-63gh-g2x5-x69v CVE-2026-71328 HIGH

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

2026-09-09
GHSA-4qhr-qf46-fcrx - HIGH

Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

2026-09-09
GHSA-rgj7-g3m4-5g8c - HIGH

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

2026-09-08
GHSA-q72m-f2r4-w4cw - HIGH

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

2026-09-08
GHSA-vg44-h755-9hw7 CVE-2026-62871 HIGH

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

2026-08-11
GHSA-jqhp-238x-qhgf CVE-2026-62886 HIGH

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

2026-08-11
GHSA-76q6-2p6h-xjqr - LOW

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

2026-07-24
GHSA-x2f5-4prf-w687 CVE-2026-54696 LOW

Ruby json: JSON generator heap buffer overflow when streaming to an IO

2026-07-23
GHSA-56r5-2p2f-7cxp CVE-2026-54559 MODERATE

PocketSphinx: Buffer overflows in language and acoustic model loading code

2026-07-17
GHSA-4r2x-xpjr-7cvv CVE-2026-22778 CRITICAL

vLLM has RCE In Video Processing

2026-07-17
GHSA-8f95-v3jq-cj86 CVE-2026-53720 MODERATE

pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small

2026-07-09
GHSA-8x9c-mqxv-q2pp CVE-2026-35433 HIGH

Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability

2026-07-08
GHSA-5pmv-rx8r-wmv5 CVE-2026-52834 HIGH -

jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow

2026-07-02
GHSA-5rff-8f7c-8jmw CVE-2022-46290 HIGH

Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

2026-07-01
GHSA-wj42-v2p3-fq2w - CRITICAL

Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

2026-07-01
GHSA-rj4c-r689-cm87 CVE-2022-46289 HIGH

Open Babel has out-of-bounds write in ORCA nAtoms parser

2026-07-01
GHSA-g8f4-g673-rfw2 - CRITICAL

Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser

2026-07-01
GHSA-8wq6-qh76-wpv9 CVE-2025-10997 HIGH

Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies

2026-07-01
GHSA-44cp-c3ww-9rv5 CVE-2026-53465 MODERATE

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

2026-06-26
GHSA-4v89-6mgq-6rgc CVE-2026-48994 MODERATE

ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems

2026-06-25
GHSA-35w3-pjm6-wj95 CVE-2026-54896 HIGH

Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent

2026-06-19