weakness in Memory Corruption
Classic Buffer Overflow
59 disclosed reports · $58,177 paid
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
- reports
- 59
- paid a bounty
- 19
Every one of the 59 is a mark on the map. Named now: 1 to 26, most upvoted first.
- RCE on Steam Client via buffer overflow in Server Info
- Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injection
- Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exe
- Remote vulnerabilities in spp
- Buffer overrun in Steam SILK voice decoder
- [Portal 2] Remote Code Execution via voice packets
- [Half-Life 1] Malformed map name leads to memory corruption and code execution
- Malformed .BSP Access Violation in CS:GO can lead to Remote Code Execution
- Specially Crafted Closed Captions File can lead to Remote Code Execution in CS:GO and other Source Games
- Buffer overflow in PyCArg_repr in _ctypes/callproc.c for Python 3.x to 3.9.1
- Buffer Overflow Vulnerability in strcpy() Leading to Remote Code Execution
- Buffer Overflow Risk in Curl_inet_ntop and inet_ntop4
- Big XSS vulnerability!
- Integer Overflow in curl_multi_get_handles() Leading to Heap Buffer Overflow
- Buffer overflow in yywarning_s
- Buffer overflows in demo parsing
- Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access Violation
- UrnState Heap Overflow
- Buffer overflow in libavi_plugin memmove() call
- Memory Corruption via Large Pixels
- [GoldSrc] RCE via malformed BSP file
- Stack Buffer Overflow via `gmp_sprintf`in `BLSSignature` and `BLSSigShare`
- [GoldSrc] RCE via 'spk' Console Command
- Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c
- Malformed BSP in GoldSrc Engine may cause shellcode injection
- Multiple Unsafe strcpy() Function Calls Leading to Potential Buffer Overflow Vulnerabilities in cURL 8.16.1-DEV
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.