Curated security research, vulnerabilities, advisories and tools for practitioners.

#heap-overflow

Security coverage tagged heap-overflow.

1.

open62541: Integer Overflow → Heap Overflow → RCE.

vulnerability | 2026-10-24 00:00 | CVE-2026-116014 | bugpwn.com | Original ↗ | .md | #rce | #vulnerability | #cve

2.

blog | 2026-09-13 00:00 | hacktron.ai | Original ↗ | .md | #supply-chain | #vulnerability-research | #openai

3.

Heap buffer overflow in scale_nearest_neighbor() via duplicate Alpha planes from nested iden/auxl items

vulnerability | Critical | 2026-08-25 11:17 | github.com | Original ↗ | .md | #rce | #memory-corruption | #vulnerability

4.

Pwning Minecraft: 4-byte heap overflow to RCE

research | 2026-06-02 12:00 | osec.io | Original ↗ | .md | #rce | #exploit | #memory-corruption

5.

CVE-2026-9256 — NGINX ngx_http_rewrite_module Overlapping PCRE Captures Heap Buffer Overflow RCE

research | 2026-05-25 00:00 | CVE-2026-9256 | aretiq.ai | Original ↗ | .md | #rce | #heap-overflow | #nginx

6.

Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP

research | 2026-05-15 09:09 | swarm.ptsecurity.com | Original ↗ | .md | #vulnerability-research | #memory-safety | #php

7.

NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability

research | 2026-05-13 12:00 | CVE-2026-42945 | depthfirst.com | Original ↗ | .md | #rce | #vulnerability-research | #memory-corruption

8.

From virtio-snd 0-day to hypervisor escape: exploiting QEMU with an uncontrolled heap overflow

research | 2026-03-17 12:00 | osec.io | Original ↗ | .md | #zero-day | #exploit | #heap-overflow

9.

ALPC You Later: CVE-2025-64721 Sandbox Escape Smashing The Heap Over IPC

vulnerability | Critical | 2025-12-23 00:00 | CVE-2025-64721 | depthfirst.com | Original ↗ | .md | #rce | #vulnerability-research | #windows-security

10.

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver – CVE-2025-53149

vulnerability | High | 2025-09-04 10:03 | CVE-2025-53149 | crowdfense.com | Original ↗ | .md | #windows-kernel | #patch-analysis | #cve-2025-53149

11.

Exploiting Windows Kernel Wild Copy With User Fault Handling (CVE-2023–28218)

vulnerability | 2023-11-09 15:00 | CVE-2023-28218 | theori.io | Original ↗ | .md | #exploit | #windows-kernel | #heap-overflow

12.

Building an Exploit for FortiGate Vulnerability CVE-2023-27997

vulnerability | 2023-10-27 00:00 | CVE-2023-27997 | bishopfox.com | Original ↗ | .md | #exploit-development | #heap-overflow | #fortinet

13.

[CVE-2022-42475] Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần II

vulnerability | 2023-08-10 10:10 | CVE-2022-42475 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #heap-overflow | #fortinet

14.

Heap Overflow in OpenBSD's slaacd via Router Advertisement

research | 2022-03-21 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability | #ipv6 | #heap-overflow

15.

CVE-2019-12527 | Cảnh báo khai thác mã từ xa trên Squid proxy

vulnerability | 2019-08-24 07:52 | CVE-2019-12527 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #proxy | #heap-overflow

16.

A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client

vulnerability | 2017-10-10 00:00 | CVE-2017-11779 | bishopfox.com | Original ↗ | .md | #windows | #memory-corruption | #vulnerability

17.

[CVE-2017-2370] Exception-oriented exploitation on iOS

vulnerability | 2017-04-18 00:00 | CVE-2017-2370 | projectzero.google | Original ↗ | .md | #exploitation | #ios | #kernel