weakness in Memory Corruption
Integer Overflow
28 disclosed reports · $1,500 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
- reports
- 28
- paid a bounty
- 2
Every one of the 28 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Integer overflow leading to buffer overflow
- Integer overflow in CipherUpdate
- Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c
- Integer overflow vulnerability
- Cookie Max-Age Integer Overflow Vulnerability
- Integer Overflow in schannel.c TLS Data Transmission
- Security Analysis Report: CURL Integer Overflow Vulnerability
- Reported RPC Overflow
- Improper Input Validation and Integer Overflow in timeamount parameter of files_retention app
- int overflow in krb5_read_data() leads to (possible) massive `recv()` write
- Integer Overflow/Signedness Mismatch in Printf Precision for HTTP/2 Trailer Headers
- MQTT Protocol Violation & Integer Overflow in libcurl
- Unsafe arithmetic in PyString_DecodeEscape
- Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (DoS)
- Security hardening: missing integer overflow check in curl_load_library()
- Integer Overflow in `curl_easy_escape()` may lead to heap buffer overflow and stack memory disclosure on 32-bit platforms
- libcurl MQTT `CURLOPT_POSTFIELDSIZE_LARGE` overflow leads to immediate DoS
- Buffer Overflow in curl's Rustls Backend
- Integer Overflow (CVE_2017_7529)
- integer Overflow in MQTT Protocol Handling Allows Bypassing Message Size Limit
- Integer overflows in tool_operate.c at line 1541
- Signed integer overflow in tool_progress_cb()
- Integer Overflow Risk in HTTP/2 Proxy Window Size Calculations
- Integer overflow in the source code tool_cb_prg.c
- Integer overlow in "header_append" function
- CVE-2017-8798 - miniupnp getHTTPResponse chunked encoding integer signedness error
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.