Fallos del tipo CWE-122

3191 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2024-38121HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-38130HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-38115HIGHWindows IP Routing Management Snapin Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-26191HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37335HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2025-21223HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.6%CVE-2019-5039HIGHAn exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2. A speciEPSS 1.6%CVE-2022-1942HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.6%CVE-2024-43627HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-48995HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-38255HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-48994HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-48993HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-43462HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-48996HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-20701HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37322HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21317HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37327HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37326HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%