Fallos del tipo CWE-122

3210 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2026-34701HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-48431HIGHSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-48339HIGHBridge | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-48372HIGHFormat Plugins | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-83959HIGHSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-47964HIGHDNG SDK | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-34628HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-82006HIGHPhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2021-21554MEDIUMDell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based EPSS 0.3%CVE-2025-30317HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2024-42648MEDIUMNanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a Denial of Service (DoS) via a crafted CONNECT meEPSS 0.3%CVE-2026-40403HIGHWindows Graphics Component Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-62770HIGHWindows Shell Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42980HIGHNT OS Kernel Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-50679HIGHWindows Search Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-83969HIGHWindows Biometric Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-58601HIGHVirtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityEPSS 0.3%CVE-2026-83980HIGHWindows Biometric Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-80075HIGHWindows Work Folders Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-40404HIGHWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityEPSS 0.3%