Fallos del tipo CWE-122

3213 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2026-9123HIGHHeap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute EPSS 0.2%CVE-2026-79591HIGHA heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation oEPSS 0.2%CVE-2026-34539MEDIUMiccDEV: HBO in CTiffImg::WriteLine()EPSS 0.2%CVE-2026-48914MEDIUMQemu-kvm: heap buffer overflow in virtio-blk scsi request handlingEPSS 0.2%CVE-2026-14610MEDIUMOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflowEPSS 0.2%CVE-2026-19781HIGHAshlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-15668MEDIUMGPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflowEPSS 0.2%CVE-2026-13574MEDIUMllvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflowEPSS 0.2%CVE-2026-3713MEDIUMpnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflowEPSS 0.2%CVE-2024-21594MEDIUMJunos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crashEPSS 0.2%CVE-2025-8894HIGHPDF File Parsing Heap-Based Buffer Overflow VulnerabilityEPSS 0.2%CVE-2026-18784MEDIUMo6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflowEPSS 0.2%CVE-2026-9502MEDIUMGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflowEPSS 0.2%CVE-2026-48690HIGHFastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet capture buffer allocation. In src/packetEPSS 0.2%CVE-2026-19206MEDIUMMZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflowEPSS 0.2%CVE-2026-19259MEDIUMMZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflowEPSS 0.2%CVE-2026-90682MEDIUMMatthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflowEPSS 0.2%CVE-2026-9500MEDIUMGNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflowEPSS 0.2%CVE-2026-82591MEDIUMOpen Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflowEPSS 0.2%CVE-2026-44662MEDIUMrust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-paddingEPSS 0.2%