Falhas do tipo CWE-122

3.734 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2026-94127CRITICALBIG-IP APM OAuth vulnerabilityEPSS 26.6%KEVCVE-2022-0572HIGHHeap-based Buffer Overflow in vim/vimEPSS 26.5%CVE-2014-0781—Yokogawa CENTUM CS 3000 Heap-based Buffer OverflowEPSS 26.3%CVE-2024-49138HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 26.2%KEVCVE-2026-27654HIGHNGINX ngx_http_dav_module vulnerabilityEPSS 25.9%CVE-2019-10192HIGHA heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.xEPSS 25.6%CVE-2026-47291CRITICALHTTP.sys Remote Code Execution VulnerabilityEPSS 25.3%CVE-2021-20043—A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially exeEPSS 23.3%CVE-2022-38742HIGHRockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service AttackEPSS 22.7%CVE-2025-40597HIGHA Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of SerEPSS 22.7%CVE-2025-54574CRITICALSquid's URN Handling can lead to Buffer OverflowEPSS 22.1%CVE-2024-1283HIGHHeap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via aEPSS 21.6%CVE-2023-21692CRITICALMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 21.4%CVE-2024-21345HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 20.2%CVE-2022-43634CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required tEPSS 19.1%CVE-2019-5482CRITICALHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.EPSS 17.9%CVE-2023-36036HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 16.7%KEVCVE-2019-14901HIGHA heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerabiliEPSS 16.5%CVE-2021-32626HIGHLua scripts can overflow the heap-based Lua stack in RedisEPSS 16.2%CVE-2024-38060HIGHWindows Imaging Component Remote Code Execution VulnerabilityEPSS 15.9%