Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2023-21406HIGHHeap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communicationEPSS 0.3%CVE-2026-20465HIGHIn wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escaEPSS 0.3%CVE-2024-43790MEDIUMheap-buffer-overflow in do_search() in Vim < 9.1.0689EPSS 0.3%CVE-2024-1062MEDIUM389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)EPSS 0.3%CVE-2025-20685HIGHIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) cEPSS 0.3%CVE-2026-38821HIGHA heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal netEPSS 0.3%CVE-2025-20686HIGHIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) cEPSS 0.3%CVE-2026-7353HIGHHeap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to EPSS 0.3%CVE-2026-4892HIGHCVE-2026-4892EPSS 0.3%CVE-2026-8525HIGHHeap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escEPSS 0.3%CVE-2020-1906—A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-oEPSS 0.3%CVE-2026-2474HIGHCrypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom()EPSS 0.3%CVE-2023-37342HIGHKofax Power PDF PNG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-1788MEDIUMrizinorg rizin utf8.c rz_utf8_encode heap-based overflowEPSS 0.3%CVE-2026-7900HIGHHeap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to EPSS 0.3%CVE-2023-29125CRITICALHeap overflow in CM_main.exe binary in Enel X JuiceBoxEPSS 0.3%CVE-2024-12669HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2023-37335HIGHKofax Power PDF BMP File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-54220HIGHInCopy | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2025-54217HIGHInCopy | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%