Falhas do tipo CWE-122

3.188 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2023-21689CRITICALMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 26.5%CVE-2022-0572HIGHHeap-based Buffer Overflow in vim/vimEPSS 26.5%CVE-2024-49138HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 26.2%KEVCVE-2019-10192HIGHA heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.xEPSS 26.0%CVE-2014-0781—Yokogawa CENTUM CS 3000 Heap-based Buffer OverflowEPSS 25.4%CVE-2026-27654HIGHNGINX ngx_http_dav_module vulnerabilityEPSS 25.1%CVE-2021-20043—A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially exeEPSS 23.3%CVE-2026-47291CRITICALHTTP.sys Remote Code Execution VulnerabilityEPSS 22.8%CVE-2025-54574CRITICALSquid's URN Handling can lead to Buffer OverflowEPSS 22.7%CVE-2022-38742HIGHRockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service AttackEPSS 22.2%CVE-2023-21692CRITICALMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 21.2%CVE-2024-21345HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 20.4%CVE-2022-43634CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required tEPSS 18.9%CVE-2024-1283HIGHHeap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via aEPSS 18.7%CVE-2019-5482CRITICALHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.EPSS 17.9%CVE-2019-14901HIGHA heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerabiliEPSS 16.9%CVE-2023-36036HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 16.7%KEVCVE-2021-32626HIGHLua scripts can overflow the heap-based Lua stack in RedisEPSS 16.2%CVE-2024-38060HIGHWindows Imaging Component Remote Code Execution VulnerabilityEPSS 15.9%CVE-2026-45657CRITICALWindows Kernel Remote Code Execution VulnerabilityEPSS 15.5%