Fallos del tipo CWE-122

3195 resultados

Estouro de heap

É quando o código escreve dados além dos limites de um buffer alocado no heap (memória dinâmica), sobrescrevendo dados de outras estruturas adjacentes. Esse estouro pode corromper metadados do heap, variáveis vizinhas ou objetos do programa, permitindo execução de código arbitrário ou negação de serviço.

Ejemplo

Um servidor web recebe uma string de tamanho arbitrário e a copia para um buffer de 256 bytes sem validar o comprimento (ex: strcpy em C). Se o atacante enviar 500 bytes, o restante escreve além da zona alocada, corrompendo estruturas próximas e potencialmente ganhando controle do fluxo.

Cómo mitigar

Use funções seguras (strncpy, strlcpy, snprintf em C) que respeitam limites de tamanho; valide e sanitize entrada do usuário antes de copiar; ative proteções do SO (ASLR, DEP/NX); use linguagens de memória segura quando possível; aplique verificações de limites em loops de cópia.

CVE-2026-72972HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-85877HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-57094HIGHMicrosoft Windows Media Foundation Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-62785HIGHWindows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-72986HIGHGraphic Fonts Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-72973HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-77486HIGHMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-80074HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69486HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-78521HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-77495HIGHWindows Imaging Component Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-44654HIGHAffected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH mEPSS 0.8%CVE-2025-70293CRITICALAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size caEPSS 0.8%CVE-2024-20259HIGHA vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected dEPSS 0.8%CVE-2021-44445—A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected prEPSS 0.8%CVE-2023-47038HIGHPerl: write past buffer end via illegal user-defined unicode propertyEPSS 0.8%CVE-2021-44442—A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected prEPSS 0.8%CVE-2024-32617HIGHHDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called fromEPSS 0.8%CVE-2025-53783HIGHMicrosoft Teams Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-1244HIGHheap-buffer-overflow in radareorg/radare2EPSS 0.8%