Weaknesses of type CWE-122

3,188 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2025-29962HIGHWindows Media Remote Code Execution VulnerabilityEPSS 14.3%CVE-2019-18240—In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotelyEPSS 14.3%CVE-2024-30085HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 14.3%CVE-2021-39863HIGHAdobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 13.2%CVE-2022-0714HIGHHeap-based Buffer Overflow in vim/vimEPSS 12.7%CVE-2024-37080CRITICALvCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access toEPSS 12.5%CVE-2023-28218HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 12.3%CVE-2019-15678—TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This aEPSS 12.2%CVE-2019-15679—TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.EPSS 11.8%CVE-2018-14618HIGHcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hasEPSS 11.0%CVE-2026-9256CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 10.9%CVE-2023-23376HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.9%KEVCVE-2024-38054HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 10.4%CVE-2021-28558HIGHAdobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code executionEPSS 10.4%CVE-2025-21333HIGHWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityEPSS 10.0%KEVCVE-2026-8711CRITICALNGINX JavaScript vulnerabilityEPSS 9.7%CVE-2025-21376HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 9.4%CVE-2024-26229HIGHWindows CSC Service Elevation of Privilege VulnerabilityEPSS 9.4%CVE-2019-14896HIGHA heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacEPSS 8.7%CVE-2021-34583HIGHCODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)EPSS 8.4%