Weaknesses of type CWE-122

3,195 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2026-86870MEDIUMA heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mEPSS 0.5%CVE-2026-57164HIGHPJSIP: Heap overflow in the HTTP clientEPSS 0.5%CVE-2026-32741HIGHlibheif has a heap buffer overflow in decode_mask_image()EPSS 0.4%CVE-2023-28225HIGHWindows NTLM Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-54091HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-23086CRITICALmpr/mps/mpt driver ioctl heap out-of-bounds writeEPSS 0.4%CVE-2025-15247MEDIUMgmg137 snap7-rs client.rs download heap-based overflowEPSS 0.4%CVE-2022-4141HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.4%CVE-2022-2069HIGH Datalogics APDFL library Heap-based Buffer OverflowEPSS 0.4%CVE-2025-54894HIGHLocal Security Authority Subsystem Service Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-2991—A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of theEPSS 0.4%CVE-2026-54715HIGHGoAccess: Heap Out-of-Bounds Write in parse_browser()EPSS 0.4%CVE-2026-44251MEDIUMWazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent messageEPSS 0.4%CVE-2026-76046HIGHBuffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer pEPSS 0.4%CVE-2024-49552HIGHMedia Encoder | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2026-44950CRITICALfs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2EPSS 0.4%CVE-2024-20516MEDIUMCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service VulnerabilitiesEPSS 0.4%CVE-2024-20517MEDIUMCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service VulnerabilitiesEPSS 0.4%CVE-2026-11727HIGHIBM MQ for HPE NonStop is vulnerable to a denial of service issueEPSS 0.4%CVE-2021-31428HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker muEPSS 0.4%