Fallos del tipo CWE-122

3190 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2022-31144HIGHPotential heap overflow in Redis EPSS 3.2%CVE-2023-6779HIGHGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()EPSS 3.2%CVE-2019-9501HIGHBroadcom wl driver is vulnerable to heap buffer overflowEPSS 3.1%CVE-2024-20696HIGHWindows libarchive Remote Code Execution VulnerabilityEPSS 3.1%CVE-2022-1381HIGHglobal heap buffer overflow in skip_range in vim/vimEPSS 3.1%CVE-2018-9947—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 3.1%CVE-2018-9949—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 3.1%CVE-2018-9974—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interactioEPSS 3.1%CVE-2021-34770CRITICALCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution VulnerabilityEPSS 3.0%CVE-2019-10951—Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities mayEPSS 2.9%CVE-2013-3245MEDIUMplugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial oEPSS 2.9%CVE-2019-5030HIGHA buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 PEPSS 2.9%CVE-2017-2591LOW389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "aEPSS 2.9%CVE-2023-36028CRITICALMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 2.8%CVE-2025-15234HIGHTenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflowEPSS 2.8%CVE-2024-28910HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.8%CVE-2015-6457—Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMEPSS 2.8%CVE-2021-38439HIGHGurumDDS Heap-based Buffer OverflowEPSS 2.8%CVE-2018-7507—WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read EPSS 2.8%CVE-2018-14290—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interactioEPSS 2.8%