CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
We have discovered 2,841,465 live websites that are affected by CWE-122.
CVEs
- Count - 11
CWE References
CWE-122 usage by Country
 United States | 900,191 websites |
 Germany | 424,252 websites |
 France | 195,969 websites |
 Netherlands | 152,361 websites |
 Cyprus | 123,228 websites |
 Russia | 106,727 websites |
 GB | 72,797 websites |
 Japan | 72,755 websites |
 Sweden | 71,756 websites |
 Italy | 49,711 websites |
CWE-122 usage by TLD
| .com | 1,068,840 websites |
| .de | 233,015 websites |
| .nl | 138,136 websites |
| .org | 117,339 websites |
| .ru | 95,804 websites |
| .net | 89,415 websites |
| .fr | 71,815 websites |
| .co.uk | 59,030 websites |
| .se | 56,003 websites |
| .it | 50,937 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-122| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Nov, 2024 | CVE-2024-11233 | Single byte overread with convert.quoted-printable-decode filter | 1,415,019 |
| Nov, 2024 | CVE-2024-47450 | Illustrator | Heap-based Buffer Overflow (CWE-122) | 102,499 |
| Jun, 2023 | CVE-2023-33129 | Microsoft SharePoint Server Denial of Service Vulnerability | 2,944 |
| Mar, 2023 | CVE-2023-25668 | TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation | 68 |
| Jun, 2021 | CVE-2021-26691 | Apache HTTP Server mod_session response handling heap overflow | 1,342,032 |
| Mar, 2021 | CVE-2021-24025 | Due to incorrect string size calculations inside the preg_quote function, a large input string passe... | 354 |
| Mar, 2021 | CVE-2020-1917 | xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to... | 354 |
| Mar, 2021 | CVE-2020-1916 | An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input ... | 360 |
| Sep, 2020 | CVE-2020-15205 | Data leak in Tensorflow | 60 |
| Jul, 2019 | CVE-2019-3570 | Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted ... | 345 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-122| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Nov, 2024 | CVE-2024-11233 | Single byte overread with convert.quoted-printable-decode filter | 1,415,019 |
| Jun, 2021 | CVE-2021-26691 | Apache HTTP Server mod_session response handling heap overflow | 1,342,032 |
| Nov, 2024 | CVE-2024-47450 | Illustrator | Heap-based Buffer Overflow (CWE-122) | 102,499 |
| Jun, 2023 | CVE-2023-33129 | Microsoft SharePoint Server Denial of Service Vulnerability | 2,944 |
| Mar, 2021 | CVE-2020-1916 | An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input ... | 360 |
| Mar, 2021 | CVE-2020-1917 | xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to... | 354 |
| Mar, 2021 | CVE-2021-24025 | Due to incorrect string size calculations inside the preg_quote function, a large input string passe... | 354 |
| Jul, 2019 | CVE-2019-3570 | Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted ... | 345 |
| Jan, 2019 | CVE-2018-6345 | The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_poi... | 340 |
| Mar, 2023 | CVE-2023-25668 | TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation | 68 |
Websites affected by CWE-122
Top websites that are affected by CWE-122. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ******.com | United States | ** | |
| *****.*****.com | United States | ** | |
| *******.com |  Singapore | *** | |
| ********.com | United States | *** | |
| **********.****.tr | Cyprus | *** | |
| *************.***.****.****.************.net | United States | *** | |
| ********.com | GB | *** | |
| ********.****.com | United States | *** | |
| *********.*************.se | United States | *** | |
| ***********.org | United States | *** |