Fallos del tipo CWE-122

3195 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2024-33428HIGHBuffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wEPSS 1.2%CVE-2025-4355HIGHTenda DAP-1520 api set_ws_action heap-based overflowEPSS 1.2%CVE-2023-0841MEDIUMGPAC reframe_mp3.c mp3_dmx_process heap-based overflowEPSS 1.2%CVE-2021-33485CRITICALCODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.EPSS 1.1%CVE-2022-43591HIGHA buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can triggEPSS 1.1%CVE-2023-0851CRITICALBuffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an aEPSS 1.1%CVE-2026-8631CRITICALHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionEPSS 1.1%CVE-2017-16737—An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file may be able to causEPSS 1.1%CVE-2025-21186HIGHMicrosoft Access Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-5462HIGHA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway beEPSS 1.1%CVE-2023-21560MEDIUMWindows Boot Manager Security Feature Bypass VulnerabilityEPSS 1.1%CVE-2021-21810HIGHA memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML fileEPSS 1.1%CVE-2021-27253HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. AlthougEPSS 1.1%CVE-2024-37977HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.1%CVE-2023-29073—A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malEPSS 1.1%CVE-2024-22532MEDIUMBuffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service via crafted xwd file.EPSS 1.1%CVE-2025-59254HIGHMicrosoft DWM Core Library Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2025-23123CRITICALA malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulEPSS 1.1%CVE-2026-68785MEDIUMMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-29912HIGHCryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurityEPSS 1.1%