Fallos del tipo CWE-122

3213 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2026-25205HIGHHeap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash EPSS 0.2%CVE-2026-56392LOWHeap-based Buffer Overflow in GNU coreutilsEPSS 0.2%CVE-2026-75649HIGHBridge | Heap-based Buffer Overflow (CWE-122)EPSS 0.2%CVE-2024-6031HIGHTesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution VulnerabilityEPSS 0.2%CVE-2026-55893HIGHCapstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecodeEPSS 0.2%CVE-2026-15182MEDIUMGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflowEPSS 0.2%CVE-2026-15520MEDIUMGNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflowEPSS 0.2%CVE-2026-8997MEDIUMHeap Buffer Overflow in vifmEPSS 0.2%CVE-2025-5040HIGHRTE File Parsing Heap-Based Overflow VulnerabilityEPSS 0.2%CVE-2026-8484MEDIUMHeap buffer overflow in JansiEPSS 0.2%CVE-2026-68514MEDIUMOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep imagesEPSS 0.2%CVE-2026-12030HIGHOut of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer prEPSS 0.2%CVE-2026-61714HIGHFluidSynth: Heap Buffer Overflow in MIDI PlayerEPSS 0.2%CVE-2025-54496HIGHFuji Electric Monitouch V-SFT-6 Heap-based Buffer OverflowEPSS 0.2%CVE-2026-0130MEDIUMIn RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information dEPSS 0.2%CVE-2025-1218LOWVarious packet overreads in mysqlnd_writeprotocol.cEPSS 0.2%CVE-2026-42309MEDIUMPillow: Heap buffer overflow with nested list coordinatesEPSS 0.2%CVE-2025-6490MEDIUMsparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflowEPSS 0.2%CVE-2026-27799MEDIUMImageMagick has a heap Buffer Over-read in its DJVU image format handlerEPSS 0.2%CVE-2026-27940HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 FixEPSS 0.2%