Weaknesses of type CWE-122

3,195 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2026-10747CRITICALIBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processingEPSS 0.6%CVE-2026-86716MEDIUMCesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflowEPSS 0.6%CVE-2026-69688HIGHWindows Encrypting File System (EFS) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-9605MEDIUMGNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflowEPSS 0.6%CVE-2026-68889HIGHMicrosoft Standard XPS Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-69272HIGHMicrosoft Standard XPS Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-32177HIGH.NET Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-69313HIGHMicrosoft Standard XPS Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-69336HIGHMicrosoft Standard XPS Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-21247HIGHWindows Hyper-V Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-51218HIGHA heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a DEPSS 0.6%CVE-2022-2819HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2020-15201MEDIUMHeap buffer overflow in TensorflowEPSS 0.6%CVE-2026-9149MEDIUMLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv fileEPSS 0.6%CVE-2024-6816HIGHIrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-57709LOWQsync CentralEPSS 0.6%CVE-2025-2368MEDIUMWebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflowEPSS 0.6%CVE-2025-36853HIGHEOL .NET 6.0 Runtime Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-23732MEDIUMFreeRDP has heap-buffer-overflow in Glyph_AllocEPSS 0.6%CVE-2025-21378HIGHWindows CSC Service Elevation of Privilege VulnerabilityEPSS 0.6%