Fallos del tipo CWE-122

3213 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2026-21491MEDIUMiccDEV has unicode buffer overflow in CIccTagTextDescriptionEPSS 0.2%CVE-2026-21490MEDIUMiccDEV has heap buffer overflow in CIccTagLut16::Validate()EPSS 0.2%CVE-2025-14956MEDIUMWebAssembly Binaryen wasm-binary.cpp readExport heap-based overflowEPSS 0.2%CVE-2026-76888LOWHeap-based Buffer Overflow in WiresharkEPSS 0.2%CVE-2025-50130HIGHA heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening VEPSS 0.2%CVE-2026-21504MEDIUMHeap Buffer Overflow in iccDEV ToneMap ParserEPSS 0.2%CVE-2023-40465HIGHImproper input leads to DoSEPSS 0.2%CVE-2025-31164MEDIUMfig2dev heap-buffer overflowEPSS 0.2%CVE-2025-1273HIGHPDF File Parsing Heap-Based Overflow VulnerabilityEPSS 0.2%CVE-2026-40706HIGHIn NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to EPSS 0.2%CVE-2026-77652HIGHDia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette indexEPSS 0.2%CVE-2026-47749HIGHstable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint filesEPSS 0.2%CVE-2025-61553HIGHAn out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows lEPSS 0.2%CVE-2024-54094HIGHA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-baEPSS 0.2%CVE-2024-54093HIGHA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-baEPSS 0.2%CVE-2026-8261MEDIUMSquirrel sqobject.cpp Load heap-based overflowEPSS 0.2%CVE-2025-68469LOWImageMagick vulnerable to heap-buffer-overflowEPSS 0.2%CVE-2023-42848HIGHThe issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOEPSS 0.2%CVE-2025-10504MEDIUMHeap Memory Corruption VulnerabilityEPSS 0.2%CVE-2025-24477MEDIUMA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.1EPSS 0.2%