CWE-122


Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

We have discovered 2,730,067 live websites that are affected by CWE-122.

Contact us to get more info







CVEs

  • Count - 16



Website Distribution by Country

Number of websites using CWE-122
United States616,611 websites


Germany427,727 websites
France215,404 websites
Netherlands161,870 websites
Russia107,568 websites
Cyprus96,547 websites
GB94,897 websites
Japan72,038 websites
Italy70,670 websites
Sweden63,576 websites

Website Distribution by TLD

Number of websites using CWE-122
.com990,210 websites
.de277,611 websites
.nl133,800 websites
.org110,078 websites
.ru93,016 websites
.fr88,131 websites
.net83,845 websites
.co.uk62,867 websites
.it57,636 websites
.se54,295 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-122
DiscoveredCVEDescriptionWebsites
Jul, 2026CVE-2026-14355 ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD1,938,521
Aug, 2025CVE-2025-54574 Squid's URN Handling can lead to Buffer Overflow7,645
Jun, 2025CVE-2025-47169 Microsoft Word Remote Code Execution Vulnerability2,228
Apr, 2025CVE-2024-56406 Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes2,106
Nov, 2024CVE-2024-11233 Single byte overread with convert.quoted-printable-decode filter204,496
Jun, 2024CVE-2024-37280 Elasticsearch StackOverflow vulnerability1
Jun, 2023CVE-2023-33129 Microsoft SharePoint Server Denial of Service Vulnerability2,204
Mar, 2023CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation71
Jun, 2021CVE-2021-26691 Apache HTTP Server mod_session response handling heap overflow730,667
Mar, 2021CVE-2021-24025 Due to incorrect string size calculations inside the preg_quote function, a large input string passe...259

The most widespread CVEs

List of the most common CVEs that are part of CWE-122
DiscoveredCVEDescriptionWebsites
Jul, 2026CVE-2026-14355 ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD1,938,521
Jun, 2021CVE-2021-26691 Apache HTTP Server mod_session response handling heap overflow730,667
Nov, 2024CVE-2024-11233 Single byte overread with convert.quoted-printable-decode filter204,496
Aug, 2025CVE-2025-54574 Squid's URN Handling can lead to Buffer Overflow7,645
Jun, 2025CVE-2025-47169 Microsoft Word Remote Code Execution Vulnerability2,228
Jun, 2023CVE-2023-33129 Microsoft SharePoint Server Denial of Service Vulnerability2,204
Apr, 2025CVE-2024-56406 Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes2,106
Mar, 2021CVE-2020-1916 An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input ...260
Mar, 2021CVE-2020-1917 xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to...259
Mar, 2021CVE-2021-24025 Due to incorrect string size calculations inside the preg_quote function, a large input string passe...259

Websites affected by CWE-122

Top websites that are affected by CWE-122. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*************.***.****.****.************.net United States***
***************.net United States***
*********.space United States***
********.info United States***
********.org United States***
*********.com United States***
********.****.com United States***
*********.net United States***
*************.com United States*,***
****************.com United States*,***
See full domain list