Weaknesses of type CWE-122

3,188 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2025-21236HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2025-21237HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2025-21233HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2025-21250HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2025-21245HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2025-21246HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2022-0261—Heap-based Buffer Overflow in vim/vimEPSS 1.7%CVE-2019-3570—Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens ifEPSS 1.7%CVE-2024-38088HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-43305—Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operationsEPSS 1.7%CVE-2021-43304—Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operationsEPSS 1.7%CVE-2022-43601HIGHMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specialEPSS 1.7%CVE-2022-43600HIGHMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specialEPSS 1.7%CVE-2021-24025—Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integerEPSS 1.7%CVE-2018-19093HIGHAn issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClient_setCommandTerminationHandler in client/client_control.c. NOEPSS 1.7%CVE-2024-43592HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2024-43593HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2020-15800—A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT sEPSS 1.7%CVE-2024-37334HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21367HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.6%