Fallos del tipo CWE-122

3190 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2024-28914HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28940HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2021-33023CRITICALAdvantech WebAccessEPSS 2.3%CVE-2021-31439HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. AuEPSS 2.3%CVE-2024-28937HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2021-3625CRITICALBuffer overflow in Zephyr USB DFU DNLOADEPSS 2.3%CVE-2025-62454HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 2.3%CVE-2023-27585HIGHPJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior afEPSS 2.3%CVE-2019-5019HIGHA heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7EPSS 2.3%CVE-2024-28913HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2023-50229HIGHBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 2.3%CVE-2019-5048HIGHA specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this caEPSS 2.3%CVE-2019-5046HIGHA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.52EPSS 2.3%CVE-2019-5045HIGHA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.52EPSS 2.3%CVE-2023-0666MEDIUMWireshark RTPS Parsing Buffer OverflowEPSS 2.3%CVE-2021-21825HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’EPSS 2.3%CVE-2021-21830HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A speciallEPSS 2.3%CVE-2024-28926HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-28912HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-28941HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%