Vulnerability index

Browse CVEs

151 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Heap-based Buffer OverflowCWE-122 × clear
Chrome HIGH 8.8
CVE-2026-3931

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted H…

Fix: 146.0.7680.71+
Fix from $1,950 2026-03-11
Chrome HIGH 8.8
CVE-2026-3913

Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted …

Fix: 146.0.7680.71+
Fix from $1,950 2026-03-11
Chrome HIGH 8.8
CVE-2026-3915

Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted…

Fix: 146.0.7680.71+
Fix from $1,950 2026-03-11
Chrome HIGH 8.8
CVE-2026-3544

Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a c…

Fix: 145.0.7632.159 / 145.0.7632.160+
Fix from $1,950 2026-03-04
Android CRITICAL 9.8
CVE-2026-0006

In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with …

Mitigation only
Fix from $2,300 2026-03-02
Chrome HIGH 8.8
CVE-2026-2648

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a craf…

Fix: 145.0.7632.109+
Fix from $1,950 2026-02-18
Chrome HIGH 8.8
CVE-2026-2650

Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted…

Fix: 145.0.7632.109+
Fix from $1,950 2026-02-18
Chrome HIGH 8.8
CVE-2026-2314

Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted…

Fix: 145.0.7632.45+
Fix from $1,950 2026-02-11
Chrome HIGH 8.8
CVE-2026-1861

Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafte…

Fix: 144.0.7559.132+
Fix from $1,950 2026-02-03
Android HIGH 8.0
CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could …

Mitigation only
Fix from $1,950 2025-12-11
Android HIGH 7.5
CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information dis…

Patch available
Fix from $1,950 2025-12-08
Android MEDIUM 6.7
CVE-2025-20774

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac…

Mitigation only
Fix from $1,600 2025-12-02
Chrome HIGH 8.1
CVE-2025-11458

Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted …

Fix: 141.0.7390.65+
Fix from $1,950 2025-11-06
Chrome HIGH 8.8
CVE-2025-11205

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentia…

Fix: 141.0.7390.54+
Fix from $1,950 2025-11-06
Chrome HIGH 7.1
CVE-2025-11206

Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted…

Fix: 141.0.7390.54+
Fix from $1,950 2025-11-06
Chrome HIGH 8.8
CVE-2025-10502

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious…

Fix: 140.0.7339.185+
Fix from $1,950 2025-09-24
Android HIGH 8.8
CVE-2025-32318

In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional …

Mitigation only
Fix from $1,950 2025-09-05
Android HIGH 7.8
CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege …

Patch available
Fix from $1,950 2025-09-04
Android HIGH 7.8
CVE-2024-49714

In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation…

Patch available
Fix from $1,950 2025-09-04
Android HIGH 7.8
CVE-2025-26455

In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio…

Patch available
Fix from $1,950 2025-09-04
Android HIGH 7.8
CVE-2025-36906

In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…

Mitigation only
Fix from $1,950 2025-09-04
Android HIGH 7.3
CVE-2025-36907

In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc…

Mitigation only
Fix from $1,950 2025-09-04
Android MEDIUM 6.7
CVE-2025-36902

In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local …

Mitigation only
Fix from $1,600 2025-09-04
Android CRITICAL 9.8
CVE-2025-26416

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote esc…

Mitigation only
Fix from $2,300 2025-09-02
Chrome HIGH 8.8
CVE-2025-8879

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curate…

Fix: 139.0.7258.127+
Fix from $1,950 2025-08-13
Chrome HIGH 8.8
CVE-2025-4096

Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted H…

Fix: 136.0.7103.59+
Fix from $1,950 2025-05-05
Chrome HIGH 8.8
CVE-2025-3619

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption vi…

Fix: 135.0.7049.95+
Fix from $1,950 2025-04-16
Chrome HIGH 8.8
CVE-2025-1426

Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via …

Fix: 133.0.6943.126+
Fix from $1,950 2025-02-19
Chrome HIGH 8.8
CVE-2025-0999

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…

Fix: 133.0.6943.126+
Fix from $1,950 2025-02-19
Chrome HIGH 8.2
CVE-2025-0611

Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

Fix: 132.0.6834.110+
Fix from $1,950 2025-01-22