Fallos del tipo CWE-122

3213 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2025-65018HIGHLIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`EPSS 0.3%CVE-2023-37295HIGHHeap-based Buffer OverflowEPSS 0.3%CVE-2025-7025HIGHRockwell Automation Heap-based Buffer Overflow In Arena® SimulationEPSS 0.3%CVE-2026-8560MEDIUMHeap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker to perform an out of bEPSS 0.3%CVE-2026-11792LOW389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)EPSS 0.3%CVE-2025-6120MEDIUMOpen Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflowEPSS 0.3%CVE-2024-32616HIGHHDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c.EPSS 0.3%CVE-2025-62526HIGHOpenWrt ubusd vulnerable to heap buffer overflowEPSS 0.3%CVE-2026-18457HIGHHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.3%CVE-2025-21139HIGHSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2025-21137HIGHSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2024-32612HIGHHDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of thEPSS 0.3%CVE-2023-4016LOWUnder some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimEPSS 0.3%CVE-2025-15536MEDIUMBYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflowEPSS 0.3%CVE-2025-6270MEDIUMHDF5 H5FSsection.c H5FS__sect_find_node heap-based overflowEPSS 0.3%CVE-2026-75883MEDIUMPPPD buffer overflow in PEAP response codeEPSS 0.3%CVE-2025-55652MEDIUMA heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of EPSS 0.3%CVE-2025-11083MEDIUMGNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflowEPSS 0.3%CVE-2025-6269MEDIUMHDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflowEPSS 0.3%CVE-2025-55661MEDIUMA heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) viaEPSS 0.3%