Falhas do tipo CWE-122

3.734 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2022-1621HIGHHeap buffer overflow in vim_strncpy find_word in vim/vimEPSS 2.4%CVE-2023-35639HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 2.4%CVE-2018-10893HIGHMultiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server EPSS 2.4%CVE-2024-28908HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28935HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-29047HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-29046HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28940HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28914HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28927HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-29048HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-29044HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28943HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2021-33023CRITICALAdvantech WebAccessEPSS 2.3%CVE-2025-58722HIGHMicrosoft DWM Core Library Elevation of Privilege VulnerabilityEPSS 2.3%CVE-2021-31439HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. AuEPSS 2.3%CVE-2024-28937HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.3%CVE-2021-3625CRITICALBuffer overflow in Zephyr USB DFU DNLOADEPSS 2.3%CVE-2023-27585HIGHPJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior afEPSS 2.3%CVE-2019-5019HIGHA heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7EPSS 2.3%