Fallos del tipo CWE-122

3195 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2024-22211LOWFreeRDP integer Overflow leading to Heap OverflowEPSS 1.1%CVE-2026-91104CRITICALHP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesEPSS 1.1%CVE-2021-3756MEDIUMHeap-based Buffer Overflow in hoene/libmysofaEPSS 1.1%CVE-2021-33007—A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project fiEPSS 1.1%CVE-2021-31954HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2026-67868CRITICALA heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processEPSS 1.1%CVE-2026-40033HIGHFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassEPSS 1.1%CVE-2023-32307HIGHheap-over-flow and integer-overflow in sofia-sipEPSS 1.1%CVE-2021-37199—A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process EPSS 1.1%CVE-2024-33698CRITICALA vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (EPSS 1.1%CVE-2023-21695HIGHMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-32038CRITICALWazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-29963HIGHWindows Media Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-27752HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-29964HIGHWindows Media Remote Code Execution VulnerabilityEPSS 1.0%CVE-2021-33000—Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code exeEPSS 1.0%CVE-2026-35512HIGHxrdp: Heap buffer overflow in EGFX channelEPSS 1.0%CVE-2023-41229HIGHD-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2021-38404HIGHDelta Electronics DOPSoft 2 Heap-based Buffer OverflowEPSS 1.0%CVE-2026-91106CRITICALHP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesEPSS 1.0%