Fallos del tipo CWE-122

3190 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2025-29962HIGHWindows Media Remote Code Execution VulnerabilityEPSS 14.3%CVE-2019-18240—In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotelyEPSS 14.3%CVE-2024-30085HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 14.3%CVE-2021-39863HIGHAdobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 13.2%CVE-2022-0714HIGHHeap-based Buffer Overflow in vim/vimEPSS 12.7%CVE-2024-37080CRITICALvCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access toEPSS 12.5%CVE-2023-28218HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 12.3%CVE-2019-15678—TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This aEPSS 12.2%CVE-2019-15679—TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.EPSS 11.8%CVE-2018-14618HIGHcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hasEPSS 11.1%CVE-2026-9256CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 10.9%CVE-2023-23376HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.9%KEVCVE-2024-38054HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 10.4%CVE-2021-28558HIGHAdobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code executionEPSS 10.4%CVE-2025-21333HIGHWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityEPSS 10.0%KEVCVE-2026-8711CRITICALNGINX JavaScript vulnerabilityEPSS 9.7%CVE-2025-21376HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 9.4%CVE-2024-26229HIGHWindows CSC Service Elevation of Privilege VulnerabilityEPSS 9.4%CVE-2018-1123LOWprocps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard pEPSS 9.1%CVE-2019-14896HIGHA heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacEPSS 8.7%