Variant weakness
Draft
CWE-122: Heap-based Buffer Overflow
Also known as: Heap Overflow, Heap Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
2,049
Recorded CVEs
With this primary weakness
17
KEVs
In the CISA KEV catalog
High
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
CWE-122 (Heap-based Buffer Overflow) is a variant-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.