Falhas do tipo CWE-122

3.189 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2021-21943CRITICALA heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can EPSS 1.6%CVE-2024-38114HIGHWindows IP Routing Management Snapin Remote Code Execution VulnerabilityEPSS 1.6%CVE-2023-32083MEDIUMMicrosoft Failover Cluster Information Disclosure VulnerabilityEPSS 1.6%CVE-2025-21178HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-21353HIGHMicrosoft WDAC ODBC Driver Remote Code Execution VulnerabilityEPSS 1.6%CVE-2023-5568MEDIUMSamba: heap buffer overflow with freshness tokens in the heimdal kdcEPSS 1.6%CVE-2021-25668—A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X2EPSS 1.6%CVE-2025-21418HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 1.6%KEVCVE-2025-20128MEDIUMClamAV OLE2 File Format Decryption Denial of Service VulnerabilityEPSS 1.6%CVE-2022-0361HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.6%CVE-2024-37321HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37328HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-35256HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37329HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37324HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37330HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37333HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-43622HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-43620HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-43621HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.6%