Weaknesses of type CWE-122

3,188 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2026-48131HIGHVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number ZeroEPSS 2.7%CVE-2019-5154HIGHAn exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2KEPSS 2.6%CVE-2026-48135MEDIUMHTTP service can incorrectly process malformed HTTP requestsEPSS 2.6%CVE-2025-30216CRITICALCryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header LengthEPSS 2.6%CVE-2026-20820HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 2.6%CVE-2017-12704—A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multipEPSS 2.6%CVE-2019-9502HIGHBroadcom wl driver is vulnerable to heap buffer overflowEPSS 2.6%CVE-2020-14482—Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Opening a specially crafted project file may overflow the heap, which mayEPSS 2.6%CVE-2020-6970—A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are EPSS 2.6%CVE-2023-21605HIGHAdobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code executionEPSS 2.6%CVE-2019-5050HIGHA specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this caEPSS 2.6%CVE-2024-30038HIGHWin32k Elevation of Privilege VulnerabilityEPSS 2.6%CVE-2021-21829HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T LabEPSS 2.5%CVE-2022-1619MEDIUMHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimEPSS 2.5%CVE-2020-14524CRITICALSofting Industrial Automation OPCEPSS 2.5%CVE-2021-31454HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 2.5%CVE-2019-18292—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 2.5%CVE-2019-18291—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 2.5%CVE-2019-18294—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 2.5%CVE-2019-18290—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 2.5%