Skip to content

CWE-680 · weakness in Memory Corruption

Integer Overflow to Buffer Overflow

113 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
3

Every one of the 113 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors f…CVE-2020-6116Gonitro · CVSS 8.8 · 28% likely

    Gonitro

  2. When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that were submitted with the job along with fi…CVE-2021-40417Blackmagicdesign · CVSS 9.8 · 16% likely

    Blackmagicdesign

  3. Vulnerability in handling large ziplistsCVE-2021-32628redis · CVSS 7.5 · 13% likely

    Redis

  4. Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results…CVE-2021-30354Amazon · 8.4% likely

    Amazon

  5. FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption a…CVE-2018-8787Check Point Software Technologies Ltd. · 8.4% likely

    Check Point

  6. FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corrup…CVE-2018-8786Check Point Software Technologies Ltd. · 8.2% likely

    Check Point

  7. rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmap_updates() and results in a memory co…CVE-2018-8795Check Point Software Technologies Ltd. · 7.4% likely

    Check Point

  8. rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corrupti…CVE-2018-8794Check Point Software Technologies Ltd. · 6.7% likely

    Check Point

  9. Redis allows out of bounds writes in hyperloglog commands leading to RCECVE-2025-32023redis · CVSS 7 · 6.6% likely

    Redis

  10. A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An at…CVE-2020-13576Genivia · CVSS 9.8 · 6.1% likely

    Genivia

  11. A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An at…CVE-2021-21783Genivia · CVSS 9.8 · 5.3% likely

    Genivia

  12. Redis vulnerability in STRALGO LCS on 32-bit systemsCVE-2021-32625redis · CVSS 7.5 · 4.1% likely

    Redis

  13. Integer overflow issue with intsets in RedisCVE-2021-32687redis · CVSS 7.5 · 4.1% likely

    Redis

  14. libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.cCVE-2026-55200libssh2 · CVSS 8.1 · 3.9% likelycovered by CyberSIXT

    The libssh2 Project

  15. Integer overflow issue with Streams in RedisCVE-2021-32627redis · CVSS 7.5 · 3.8% likely

    Redis

  16. An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer overflow can occur whil…CVE-2019-5087Xcftools Project · CVSS 8.8 · 3.6% likely
  17. Integer overflow issue with strings in RedisCVE-2021-41099redis · CVSS 7.5 · 3.5% likely

    Redis

  18. An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools, version 1.0.7. An integer overflow can o…CVE-2019-5086Xcftools Project · CVSS 7.5 · 3.2% likely
  19. Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platformsCVE-2021-32762redis · CVSS 7.5 · 2.6% likely

    Redis

  20. Integer Overflow to Buffer Overflow in HiredisCVE-2021-32765redis · CVSS 8.8 · 2.1% likely

    Redis

  21. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MP…CVE-2021-21846Gpac · CVSS 8.8 · 2.0% likely

    Gpac

  22. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MP…CVE-2021-21845Gpac · CVSS 8.8 · 2.0% likely

    Gpac

  23. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MP…CVE-2021-21843Gpac · CVSS 8.8 · 2.0% likely

    Gpac

  24. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MP…CVE-2021-21839Gpac · CVSS 8.8 · 2.0% likely

    Gpac

  25. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MP…CVE-2021-21838Gpac · CVSS 8.8 · 2.0% likely

    Gpac

  26. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MP…CVE-2021-21837Gpac · CVSS 8.8 · 2.0% likely

    Gpac

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.