Weaknesses of type CWE-122

3,195 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2025-50161HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-29811HIGHWindows Mobile Broadband Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-30376HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-13588MEDIUMseladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflowEPSS 0.6%CVE-2026-13589MEDIUMseladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflowEPSS 0.6%CVE-2026-13590MEDIUMseladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflowEPSS 0.6%CVE-2026-89028HIGHMikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXEPSS 0.6%CVE-2022-2522HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2024-26239HIGHWindows Telephony Server Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-54900HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2022-2347HIGHUnchecked Download size in UbootEPSS 0.6%CVE-2026-3561HIGHPhilips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-32763MEDIUMQTS, QuTS heroEPSS 0.6%CVE-2026-50683HIGHWindows DHCP Client Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-3557HIGHPhilips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-69847HIGHWindows DHCP Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-60714HIGHWindows OLE Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-69777HIGHWindows DHCP Client Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-42438MEDIUMZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowEPSS 0.6%CVE-2024-42436MEDIUMZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowEPSS 0.6%