Fallos del tipo CWE-122

3195 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2020-7829HIGHDaviewIndy Heap-based Buffer Overflow VulnerabilityEPSS 1.2%CVE-2024-30045MEDIUM.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-0570HIGHHeap-based Buffer Overflow in mruby/mrubyEPSS 1.2%CVE-2022-0213MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 1.2%CVE-2021-24042CRITICALThe calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.EPSS 1.2%CVE-2020-11061MEDIUMHeap-based Buffer Overflow in Bareos DirectorEPSS 1.2%CVE-2023-3430HIGHOpenimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppEPSS 1.2%CVE-2019-9136HIGHDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format fEPSS 1.2%CVE-2023-7158HIGHMicroPython objslice.c slice_indices heap-based overflowEPSS 1.2%CVE-2023-36793HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-35350HIGHWindows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2024-3209MEDIUMUPX bele.h get_ne64 heap-based overflowEPSS 1.2%CVE-2026-5201HIGHGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageEPSS 1.2%CVE-2025-26668HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-25667—TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` wEPSS 1.2%CVE-2022-40660HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. UEPSS 1.2%CVE-2026-34356HIGHApache HTTP Server: ProxyPassReverseCookieMap buffer overflowEPSS 1.2%CVE-2026-3085HIGHGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-24672HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 EPSS 1.2%CVE-2020-27829—A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45.EPSS 1.2%