Browse / Memory Corruption

Memory Corruption

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Memory Corruption - Generic395
• Use After Free90
• Buffer Over-read67
• Classic Buffer Overflow59
• Heap Overflow55
• Out-of-bounds Read49
• NULL Pointer Dereference42
• Stack Overflow35
• Integer Overflow28
• Double Free17
• Array Index Underflow16
• Improper Null Termination11
• Type Confusion9
• Incorrect Calculation of Buffer Size8
• Use of Externally-Controlled Format String8
• Buffer Underflow7
• Off-by-one Error6
• Integer Underflow5
• Buffer Under-read4
• Write-what-where Condition3
• Free of Memory not on the Heap1
• Integer Overflow to Buffer Overflow1
• Missing Release of Memory after Effective Lifetime1

Often found together with

• Code Execution156
• Denial of Service128
• Information Disclosure56

Most upvoted Memory Corruption reports

AllValidInformativeN/ADuplicate

1. Buffer overflow in strcpyN/ABuffer Underflow · critical · curl
   53 votes
2. Integer Underflow in src/var.cN/AInteger Underflow · medium · curl
   46 votes
3. Buffer Overflow Vulnerability in strcpy() Leading to Remote Code ExecutionN/AClassic Buffer Overflow · critical · curl
   45 votes
4. Buffer Overflow Risk in Curl_inet_ntop and inet_ntop4N/AClassic Buffer Overflow · high · curl
   39 votes
5. Buffer Overflow Vulnerability in WebSocket HandlingN/AHeap Overflow · high · curl
   38 votes
6. Integer Overflow in curl_multi_get_handles() Leading to Heap Buffer OverflowN/AClassic Buffer Overflow · medium · curl
   36 votes
7. Vulnerability Report: Buffer Overflow in Path SanitizationN/AMemory Corruption - Generic · critical · curl
   30 votes
8. Use-After-Free in OpenSSL Keylog Callback via SSL_get_ex_data() in libcurlN/AUse After Free · high · curl
   30 votes
9. ("possible") UAFN/AMemory Corruption - Generic · curl
   29 votes
10. Cookie Max-Age Integer Overflow VulnerabilityN/AInteger Overflow · critical · curl
    28 votes
11. Out-of-bounds read in HTTP method handling causes undefined behavior and potential crash This is sharp, Gaurav. We’ve got a real memory-safety bug insN/ABuffer Over-read · high · curl
    28 votes
12. Integer Overflow in schannel.c TLS Data TransmissionN/AInteger Overflow · medium · curl
    28 votes
13. Stack use-after-scope in HTTP/3 POST request processing via CURLOPT_POSTFIELDSN/AUse After Free · high · curl
    27 votes
14. Double Free Vulnerability in `libcurl` Cookie Management (`cookie.c`)N/ADouble Free · curl
    27 votes
15. HackerOneN/AArray Index Underflow · curl
    26 votes
16. Security Analysis Report: CURL Integer Overflow VulnerabilityN/AInteger Overflow · curl
    26 votes
17. Use-After-Free race condition in url_move_hostname() via shared connection poolN/AUse After Free · medium · curl
    23 votes
18. Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TON/ABuffer Over-read · medium · curl
    23 votes
19. Exploitable Format String Vulnerability in curl_mfprintf FunctionN/AUse of Externally-Controlled Format String · high · curl
    23 votes
20. Cookie Replacement Use-After-Free VulnerabilityN/AUse After Free · curl
    21 votes
21. Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.cN/AClassic Buffer Overflow · critical · curl
    21 votes
22. Title: Use-After-Free in cURL Test Suite via Improper Cleanup of Global HandleN/AUse After Free · high · curl
    20 votes
23. GnuTLS CURLINFO_TLS_SESSION / CURLINFO_TLS_SSL_PTR type confusionN/AType Confusion · curl
    20 votes
24. Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses and below `curl` results in indeterminate SSRF vulnerabilities.N/AType Confusion · critical · curl
    20 votes
25. ## Title Heap Use-After-Free Vulnerability in `curl` Leading to Potential Code ExecutionN/AUse After Free · medium · curl
    19 votes
26. Heap Buffer Overflow in Curl_memdup0() via CURLOPT_COPYPOSTFIELDS/CURLOPT_POSTFIELDSIZE MismatchN/ABuffer Over-read · high · curl
    19 votes
27. Integer Overflow to Heap Overflow in DoH Response HandlingN/AHeap Overflow · curl
    18 votes
28. Stack Buffer Overflow in cURL Cookie Parsing Leads to RCEN/AStack Overflow · high · curl
    18 votes
29. Multiple Unsafe strcpy() Function Calls Leading to Potential Buffer Overflow Vulnerabilities in cURL 8.16.1-DEVN/AClassic Buffer Overflow · high · curl
    18 votes
30. Heap Buffer Over-Read via Malicious SMB Server READ_ANDX ResponseN/AOut-of-bounds Read · high · curl
    17 votes
31. Buffer Overflow in WebSocket Handshake (lib/ws.c:1287)N/AClassic Buffer Overflow · high · curl
    16 votes
32. Integer Overflow/Signedness Mismatch in Printf Precision for HTTP/2 Trailer HeadersN/AInteger Overflow · curl
    15 votes
33. Buffer Overflow in cURL Internal printf FunctionN/AStack Overflow · critical · curl
    15 votes
34. Incorrect sizeof() in Rustls Backend Memory AllocationN/AIncorrect Calculation of Buffer Size · low · curl
    15 votes
35. Format string vulnerability, curl_msnprintf() function N/AUse of Externally-Controlled Format String · medium · curl
    15 votes
36. Heap Buffer Overflow in TFTPN/AHeap Overflow · critical · curl
    14 votes
37. heap-use-after-free in curl_easy_cleanup() called from callbackN/AUse After Free · curl
    13 votes
38. Function `do_pubkey()` can have out-of-bound read issueN/AOut-of-bounds Read · curl
    13 votes
39. Security hardening: missing integer overflow check in curl_load_library()N/AInteger Overflow · low · curl
    12 votes
40. Stack Buffer Overflow in cURL wolfSSL Backend (lib/vtls/wolfssl.c)N/AStack Overflow · curl
    12 votes
41. Curl Telnet Handler Buffer OverflowN/ABuffer Underflow · curl
    11 votes
42. Integer Overflow in `curl_easy_escape()` may lead to heap buffer overflow and stack memory disclosure on 32-bit platformsN/AInteger Overflow · low · curl
    11 votes
43. Stack Buffer Overflow in curl's OpenSSL Provider HandlingN/AStack Overflow · medium · curl
    11 votes
44. Buffer Overflow in curl MQTT Test Server (tests/server/mqttd.c) via Malicious CONNECT PacketN/AMemory Corruption - Generic · critical · curl
    11 votes
45. Heap use-after-free (write) in mev_forget_socket() via reentrant curl_easy_pause() — incomplete fix for CVE-2026-9080N/AUse After Free · medium · curl
    10 votes
46. Heap Buffer Overflow in libcurl curl_slist_append via Unterminated StringN/AHeap Overflow · high · curl
    10 votes
47. libcurl MQTT PUBLISH length overflow (heap overflow)N/AHeap Overflow · low · curl
    9 votes
48. Heap buffer overflow vulnerability in conncache.c: incorrect use of pointer arrays resulting in out-of-bounds memory writes.N/AHeap Overflow · medium · curl
    9 votes
49. Zomato Map server going out of memory while resizing map imageN/AHeap Overflow · Eternal
    9 votes
50. libcurl shared-HSTS-cache race leads to use-after-free with attacker-controlled function-pointer callN/AUse After Free · critical · curl
    8 votes
51. Use-after-free in `curl_easy_ssls_export()` during callback re-entrancyN/AUse After Free · high · curl
    8 votes
52. Heap Buffer Over-read in lib/http2.c (on_header) handling PUSH_PROMISE framesN/ABuffer Over-read · high · curl
    8 votes
53. Off-by-One Buffer Overflow in SMB Path HandlerN/AOff-by-one Error · medium · curl
    8 votes
54. Buffer over-read,, Missing NUL termination in addvariable() causes undefined behaviorN/ABuffer Over-read · curl
    8 votes
55. SOCKS5 Heap Buffer Overflow via Malicious HTTP Redirect with Oversized HostnameN/AHeap Overflow · medium · curl
    8 votes
56. Your page has 2 blocking CSS resources. This causes a delay in rendering your page.N/AArray Index Underflow · critical · Node.js
    8 votes
57. Improper Data Validation / Unvalidated InputN/AClassic Buffer Overflow · Liberapay
    8 votes
58. Heap-buffer-overflow in `Curl_ssl_push_certinfo_len()` — sole bounds check is `DEBUGASSERT`N/AOut-of-bounds Read · high · curl
    7 votes
59. Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilitiesN/AType Confusion · low · curl
    7 votes
60. Re-entrant curl_easy_pause UAF in cw-pauseN/AUse After Free · low · curl
    6 votes
61. Rustls backend discloses out-of-bounds heap data during legal IMAP upload cancellationN/AOut-of-bounds Read · medium · curl
    6 votes
62. Heap Out-of-Bounds Read in lib/http2.c via Malformed PUSH_PROMISE HeadersN/AOut-of-bounds Read · high · curl
    5 votes
63. Heap buffer overflow in Curl_ipv4_resolve_r due to incorrect buffer alignment and size calculation on AmigaOSN/AMemory Corruption - Generic · curl
    4 votes
64. No Rate Limiting for Password Reset Email Leads to Email FloodingN/ANULL Pointer Dereference · medium · UPchieve
    4 votes
65. Integer Overflow Risk in HTTP/2 Proxy Window Size CalculationsN/AInteger Overflow · medium · curl
    3 votes
66. Email Authentication BypassN/AMemory Corruption - Generic · Paragon Initiative Enterprises
    3 votes
67. Heap overflow via HTTP/2 PUSH_PROMISEN/AHeap Overflow · low · curl
    2 votes
68. Binary output bypassN/AClassic Buffer Overflow · low · curl
    2 votes
69. Bime Unable to load Data SourcesN/AMemory Corruption - Generic · Bime
    2 votes
70. Use of Unsafe function || StrcpyN/AClassic Buffer Overflow · high · curl
    1 votes
71. Buffer overflowN/AClassic Buffer Overflow · Liberapay
    1 votes
72. Integer overflows in unescape_word()N/AInteger Overflow · low · curl