weakness in Memory Corruption
Memory Corruption - Generic
320 disclosed reports · $191,250 paid
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
- reports
- 320
- paid a bounty
- 143
Every one of the 320 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Race Conditions in Popular reports feature.
- Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe)
- [FG-VD-19-009] Intel(R) Trace Analyzer and Collector 2019 Memory Corruption Vulnerability Notification
- Type Confusion Vulnerability - SOAP / make_http_soap_request()
- Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo<Value>& args) when args[0] is a string.
- Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412)
- Memory corruption in imap-parser.c
- puttygen: 160MB memory leak while trying to extract openssh public key from crafted key file
- [MK8DX] Improper ranking/replay file parsing
- Double free vulnerability in Flash Player Settings Manager (CVE-2015-0346)
- JSBeautifier BApp: Race condition leads to memory disclosure
- ("possible") UAF
- 💥💥Crash report -Cloudflare WARP doesn't verify text length in "Excluded Host" name input data💥💥
- ZeroMQ libzmq remote code execution
- Memory Leak
- select_colors write out-of-bounds
- Crash: Overwriting NoMethodError with a builtin class crashes/corrupts memory
- [avito.ru] ImageMagick uninitialized image palette
- sprintf combined format string attack
- [185.30.178.57:8080] - Vulnerable to Jetleak
- LZMADecompressor.decompress Use After Free
- Exposed, outdated nginx server (v1.4.6) potentially vulnerable to heap-based buffer overflow & RCE
- Malformed .WAV triggers an Access Violation on GoldSRC (hl.exe)
- chain.__setstate__ Type Confusion
- wddx_deserialize use-after-free
- Use-After-Free / Double-Free in WDDX Deserialize
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.