Weaknesses of type CWE-122

3,189 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2025-21286HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.3%CVE-2024-37987HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.3%CVE-2019-9135HIGHDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file tEPSS 1.3%CVE-2022-2344HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.3%CVE-2023-5841CRITICALOpenEXR Heap Overflow in Scanline Deep Data ParsingEPSS 1.3%CVE-2023-23400HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-50330HIGHWindows Remote Desktop Client Elevation of Privilege VulnerabilityEPSS 1.3%CVE-2020-27248HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 1.2%CVE-2023-7104MEDIUMSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowEPSS 1.2%CVE-2020-27249HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 1.2%CVE-2020-27247HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 1.2%CVE-2020-7829HIGHDaviewIndy Heap-based Buffer Overflow VulnerabilityEPSS 1.2%CVE-2024-30045MEDIUM.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-7828HIGHDaviewIndy Heap-based Buffer Overflow VulnerabilityEPSS 1.2%CVE-2022-0570HIGHHeap-based Buffer Overflow in mruby/mrubyEPSS 1.2%CVE-2022-0213MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 1.2%CVE-2021-24042CRITICALThe calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.EPSS 1.2%CVE-2020-11061MEDIUMHeap-based Buffer Overflow in Bareos DirectorEPSS 1.2%CVE-2023-3430HIGHOpenimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppEPSS 1.2%CVE-2019-9136HIGHDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format fEPSS 1.2%