Fallos del tipo CWE-122

3190 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2023-36423HIGHMicrosoft Remote Registry Service Remote Code Execution VulnerabilityEPSS 2.0%CVE-2023-33129MEDIUMMicrosoft SharePoint Server Denial of Service VulnerabilityEPSS 2.0%CVE-2016-9581LOWAn infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.EPSS 2.0%CVE-2024-26210HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 2.0%CVE-2022-43599HIGHMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specialEPSS 2.0%CVE-2024-0040HIGHIn setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informatioEPSS 2.0%CVE-2018-6344HIGHA heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used EPSS 1.9%CVE-2024-26159HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.9%CVE-2018-10606—WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploited when the applicatEPSS 1.9%CVE-2024-26161HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2017-6037—A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a bufEPSS 1.9%CVE-2017-16717—A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified,EPSS 1.9%CVE-2023-29363CRITICALWindows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityEPSS 1.9%CVE-2018-1124HIGHprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allowEPSS 1.9%CVE-2021-34313—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll liEPSS 1.9%CVE-2022-43602HIGHMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specialEPSS 1.9%CVE-2021-34938HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%CVE-2018-14794—Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before coEPSS 1.9%CVE-2021-4019HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.9%CVE-2020-13572CRITICALA heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafteEPSS 1.9%