Fallos del tipo CWE-122

3190 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2019-5057HIGHAn exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX imaEPSS 3.6%CVE-2019-5058HIGHAn exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A specially crafted XCF imaEPSS 3.6%CVE-2026-85880HIGHWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityEPSS 3.6%KEVCVE-2017-9636—Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in aEPSS 3.6%CVE-2024-43560HIGHMicrosoft Windows Storage Port Driver Elevation of Privilege VulnerabilityEPSS 3.6%CVE-2023-24912HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 3.6%CVE-2018-10617—Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger thaEPSS 3.5%CVE-2021-23165—A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary coEPSS 3.5%CVE-2023-23415CRITICALInternet Control Message Protocol (ICMP) Remote Code Execution VulnerabilityEPSS 3.5%CVE-2022-24795MEDIUMBuffer Overflow and Integer Overflow in yajl-rubyEPSS 3.5%CVE-2026-42945CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 3.4%CVE-2024-38237HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 3.4%CVE-2022-2848CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. AuthenticaEPSS 3.4%CVE-2024-38242HIGHKernel Streaming Service Driver Elevation of Privilege VulnerabilityEPSS 3.4%CVE-2019-6740CRITICALThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 EPSS 3.3%CVE-2023-21812HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 3.3%CVE-2024-20677HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 3.3%CVE-2021-24036—Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with EPSS 3.3%CVE-2020-26986—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 3.3%CVE-2022-39260HIGHGit vulnerable to Remote Code Execution via Heap overflow in `git shell`EPSS 3.3%