weakness in Memory Corruption
Stack Overflow
35 disclosed reports · $14,517 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
- reports
- 35
- paid a bounty
- 8
Every one of the 35 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Stack overflow in XML Parsing
- Malformed playlist.txt in GoldSrc games leads to Access Violation & arbitrary code execution
- VLC 4.0.0 - Stack Buffer Overflow (SEH)
- Buffer overflow In hl.exe's launch -game argument allows an attacker to execute arbitrary code locally or from browser
- Stack Buffer Overflow in mariadb-dump quote_name() Allows Malicious Server to Execute Arbitrary Code on Client
- Stack overflow affecting "ext" field on stylers.xml configuration file
- [CS:GO] Unchecked texture file name with TEXTUREFLAGS_DEPTHRENDERTARGET can lead to Remote Code Execution
- [Wii U/3DS/Switch] Improper bounds check in StationURL in all NEX clients leading to remote crash/RCE
- mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full (CVE-2020-7065)
- [Switch, PIA/MK8DX] Stack buffer overflow and potential RCE in PIA (LAN/LDN, possibly NEX) room info deserialization
- [Switch] Remote stack buffer overflow in the LDN/LP2P DHCP server leads to control-flow hijack
- CVE-2024-31079 in nginx
- Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution
- GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCE
- Stack Buffer-Overflow in MariaDB Charset_collation_map_st::insert_or_replace()
- libmariadb ( mariadb-connector-c ): stack overflow via server-controlled field->length in prepared-statement codec
- NEX: Stack overflow in UnicodeToUtf8
- Stack Overflow DoS in ST_GeomFromGeoJSON Allows Any Authenticated User to Crash the Entire Server
- Stack Buffer Overflow in cURL Cookie Parsing Leads to RCE
- Stack Buffer Overflow in MariaDB CONNECT storage engine when reading DOUBLE columns from TABLE_TYPE=DOS tables
- Buffer Overflow in cURL Internal printf Function
- Stack-based Buffer Overflow in TELNET NEW_ENV Option Handling
- [https://jenkins.brew.sh] Jenkins in Debug Mode with Stack Traces Enabled
- Stack Buffer Overflow in cURL wolfSSL Backend (lib/vtls/wolfssl.c)
- Stack Buffer Overflow in curl's OpenSSL Provider Handling
- CVE-2022-35260: .netrc parser out-of-bounds access
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.