Weaknesses of type CWE-122

3,188 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2019-15692—TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorreEPSS 4.8%CVE-2023-24943CRITICALWindows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityEPSS 4.7%CVE-2016-8622LOWThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would beEPSS 4.7%CVE-2026-20840HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 4.7%CVE-2017-9050HIGHlibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerabEPSS 4.6%CVE-2016-1834HIGHHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS EPSS 4.6%CVE-2018-11457—A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HFEPSS 4.6%CVE-2018-14821—Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentEPSS 4.5%CVE-2019-15694—TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. VulnerabiliEPSS 4.5%CVE-2026-42533CRITICALNGINX Map directive and Regex matching vulnerabilityEPSS 4.5%CVE-2016-9603MEDIUMA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occurEPSS 4.4%CVE-2019-8258—UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be eEPSS 4.4%CVE-2026-40364HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 4.4%CVE-2017-5225HIGHLibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSaEPSS 4.4%CVE-2021-36056MEDIUMXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 4.4%CVE-2024-20755HIGHAdobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution VulnerabilityEPSS 4.4%CVE-2026-2314HIGHHeap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via EPSS 4.4%CVE-2024-29204CRITICALA Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to eEPSS 4.3%CVE-2020-26987—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 4.3%CVE-2020-26985—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 4.3%