weakness in Memory Corruption
Buffer Over-read
67 disclosed reports · $18,742 paid
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
- reports
- 67
- paid a bounty
- 23
Every one of the 67 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Heap Buffer Overflow (READ: 4) in phar_parse_pharfile
- Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow
- CVE-2024-7264: ASN.1 date parser overread
- CVE-2024-7347: Buffer overread in the ngx_http_mp4_module
- apache access.log leakage via long request on https://rapida.ru/
- CVE-2025-9086: Out of bounds read for cookie path
- Heap-Buffer-Overread in contains_whitespace when calling parser_validate after supplying a maliciously crafted buffer to parser_parse
- curl: stack-buffer overread during punycode conversions
- Out-of-bounds read in HTTP method handling causes undefined behavior and potential crash This is sharp, Gaurav. We’ve got a real memory-safety bug ins
- Heap-OOB read in urlapi `redirect_url()` via `CURLU_GUESS_SCHEME` + `CURLU_NO_GUESS_SCHEME` flow
- CVE-2024-6874: macidn punycode buffer overread
- SMTP header injection via C-escape `\r` in the recipient display name
- Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TO
- При передаче в ID сообщения нулевого байта, происходит вывод какого-то буфера.
- ap_find_token() Buffer Overread
- Heap Buffer Overflow in Curl_memdup0() via CURLOPT_COPYPOSTFIELDS/CURLOPT_POSTFIELDSIZE Mismatch
- Security check failure or stack buffer overrun (crash)
- Heap Memory Disclosure via Integer Underflow in Item_func_json_arrayagg::cut_max_length in MariaDB Server
- Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)
- reading the stack data of the imap process
- Index Out Of Bounds in protobuf unmarshalling
- Buffer out of bound read in miniupnpc xml parser
- tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c
- Squid leaks previous content from reusable buffer
- Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
- CVE-2017-13008 The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.