Fallos del tipo CWE-122

3212 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2023-37335HIGHKofax Power PDF BMP File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-54217HIGHInCopy | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2025-54220HIGHInCopy | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2025-54219HIGHInCopy | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-81993MEDIUMAcrobat Reader | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2024-34771HIGHA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnerable to heap-based bufEPSS 0.3%CVE-2025-6818MEDIUMHDF5 H5Ochunk.c H5O__chunk_protect heap-based overflowEPSS 0.3%CVE-2025-6660HIGHPDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-45306MEDIUMheap-buffer-overflow in VimEPSS 0.3%CVE-2025-2849MEDIUMUPX p_lx_elf.cpp un_DT_INIT heap-based overflowEPSS 0.3%CVE-2025-12204MEDIUMKamailio Configuration File rvalue.c rve_destroy heap-based overflowEPSS 0.3%CVE-2025-30295HIGHAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2025-2924MEDIUMHDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflowEPSS 0.3%CVE-2025-48379HIGHPillow Vulnerable to Write Buffer Overflow on BCn encodingEPSS 0.3%CVE-2026-19499HIGHBuffer overflow in strfmon and strfmon_l right-justification paddingEPSS 0.3%CVE-2025-2915MEDIUMHDF5 H5Faccum.c H5F__accum_free heap-based overflowEPSS 0.3%CVE-2025-20712HIGHIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eEPSS 0.3%CVE-2024-43802MEDIUMheap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697EPSS 0.3%CVE-2026-27286MEDIUMInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2025-24439HIGHSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%