Weaknesses of type CWE-122

3,188 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2019-5046HIGHA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.52EPSS 2.3%CVE-2023-0666MEDIUMWireshark RTPS Parsing Buffer OverflowEPSS 2.3%CVE-2021-21830HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A speciallEPSS 2.3%CVE-2021-21825HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’EPSS 2.3%CVE-2024-28912HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-28926HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-28941HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2025-58722HIGHMicrosoft DWM Core Library Elevation of Privilege VulnerabilityEPSS 2.3%CVE-2020-16223—Delta Electronics TPEditor Versions 1.97 and prior. A heap-based buffer overflow may be exploited by processing a specially crafted project EPSS 2.2%CVE-2021-3968HIGHHeap-based Buffer Overflow in vim/vimEPSS 2.2%CVE-2024-26195HIGHDHCP Server Service Remote Code Execution VulnerabilityEPSS 2.2%CVE-2024-26202HIGHDHCP Server Service Remote Code Execution VulnerabilityEPSS 2.2%CVE-2018-8833—Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pmEPSS 2.2%CVE-2024-28911HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.2%CVE-2024-28915HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.2%CVE-2021-40426CRITICALA heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commEPSS 2.2%CVE-2023-52356HIGHLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of serviceEPSS 2.2%CVE-2024-21348HIGHInternet Connection Sharing (ICS) Denial of Service VulnerabilityEPSS 2.2%CVE-2024-38160CRITICALWindows Network Virtualization Remote Code Execution VulnerabilityEPSS 2.2%CVE-2025-24993HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 2.2%KEV