Browse / Memory Corruption

Memory Corruption

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Memory Corruption - Generic395
• Use After Free90
• Buffer Over-read67
• Classic Buffer Overflow59
• Heap Overflow55
• Out-of-bounds Read49
• NULL Pointer Dereference42
• Stack Overflow35
• Integer Overflow28
• Double Free17
• Array Index Underflow16
• Improper Null Termination11
• Type Confusion9
• Incorrect Calculation of Buffer Size8
• Use of Externally-Controlled Format String8
• Buffer Underflow7
• Off-by-one Error6
• Integer Underflow5
• Buffer Under-read4
• Write-what-where Condition3
• Free of Memory not on the Heap1
• Integer Overflow to Buffer Overflow1
• Missing Release of Memory after Effective Lifetime1

Often found together with

• Code Execution156
• Denial of Service128
• Information Disclosure56

Most upvoted Memory Corruption reports

AllValidInformativeN/ADuplicate

1. Use-After-Free in SMB connection reuse (req->path dangling pointer after needle destruction)DuplicateUse After Free · high · curl
   58 votes
2. [Wii U/3DS/Switch] Improper bounds check in StationURL in all NEX clients leading to remote crash/RCEDuplicateStack Overflow · low · Nintendo
   42 votes
3. NEX: Stack overflow in UnicodeToUtf8DuplicateStack Overflow · Nintendo
   23 votes
4. Heap Buffer Over-Read via Malicious SMB Server READ_ANDX ResponseDuplicateOut-of-bounds Read · medium · curl
   9 votes
5. Out-Of-Bounds Memory Read on ███DuplicateOut-of-bounds Read · U.S. Dept Of Defense
   7 votes
6. Retry-independent time-condition HTTP/2 UAFDuplicateUse After Free · curl
   6 votes
7. OpenSSL provider OSSL_LIB_CTX used after free via the connection shutdown list (CVE-2026-80229 fix incomplete)DuplicateUse After Free · low · curl
   3 votes
8. Use of unitialized value in token_check_object (src/or/parsecommon.c:224)DuplicateMemory Corruption - Generic · Tor
   3 votes
9. csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVCDuplicateNULL Pointer Dereference · medium · Kubernetes
   1 votes