Fallos del tipo CWE-122

3195 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2024-21341MEDIUMWindows Kernel Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-24057HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-28896HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2020-15195HIGHHeap buffer overflow in TensorflowEPSS 0.9%CVE-2024-26168MEDIUMSecure Boot Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2020-27250HIGHIn SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to coEPSS 0.9%CVE-2025-53720HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-28587HIGHA specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oEPSS 0.9%CVE-2022-23547MEDIUMHeap buffer overflow in pjproject when decoding STUN messageEPSS 0.9%CVE-2023-4322HIGHHeap-based Buffer Overflow in radareorg/radare2EPSS 0.9%CVE-2024-40763HIGHHeap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackersEPSS 0.9%CVE-2024-21778HIGHA heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDKEPSS 0.9%CVE-2026-8175CRITICALMultiple vulnerabilities in Aspera applications.EPSS 0.9%CVE-2021-32959HIGHAVEVA SuiteLink Server Buffer OverflowEPSS 0.9%CVE-2024-28231CRITICALManipulated DATA Submessage causes a heap-buffer-overflow errorEPSS 0.9%CVE-2023-21782HIGH3D Builder Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-21780HIGH3D Builder Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-21792HIGH3D Builder Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-29070HIGHA heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a remote attacker to causeEPSS 0.9%CVE-2024-32605HIGHHDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).EPSS 0.9%