Fallos del tipo CWE-122

3195 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2023-24907HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-24913HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.3%CVE-2025-29967HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 1.3%CVE-2024-3204HIGHc-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflowEPSS 1.3%CVE-2020-28598HIGHAn out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and EPSS 1.3%CVE-2025-21282HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.3%CVE-2025-21266HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.3%CVE-2025-21273HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.3%CVE-2025-21286HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.3%CVE-2024-37987HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.3%CVE-2019-9135HIGHDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file tEPSS 1.3%CVE-2023-5841CRITICALOpenEXR Heap Overflow in Scanline Deep Data ParsingEPSS 1.3%CVE-2026-48440HIGHColdFusion | Heap-based Buffer Overflow (CWE-122)EPSS 1.3%CVE-2023-23400HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-50330HIGHWindows Remote Desktop Client Elevation of Privilege VulnerabilityEPSS 1.3%CVE-2020-27248HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 1.2%CVE-2023-7104MEDIUMSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowEPSS 1.2%CVE-2020-27247HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 1.2%CVE-2020-27249HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 1.2%CVE-2020-7829HIGHDaviewIndy Heap-based Buffer Overflow VulnerabilityEPSS 1.2%