Falhas do tipo CWE-122

3.737 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2019-9135HIGHDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file tEPSS 1.3%CVE-2025-26668HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-48440HIGHColdFusion | Heap-based Buffer Overflow (CWE-122)EPSS 1.3%CVE-2023-23400HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.3%CVE-2025-4355HIGHTenda DAP-1520 api set_ws_action heap-based overflowEPSS 1.3%CVE-2025-3277MEDIUMAn integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer.EPSS 1.3%CVE-2026-50330HIGHWindows Remote Desktop Client Elevation of Privilege VulnerabilityEPSS 1.3%CVE-2021-27253HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. AlthougEPSS 1.3%CVE-2025-5462HIGHA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway beEPSS 1.3%CVE-2024-30045MEDIUM.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-7829HIGHDaviewIndy Heap-based Buffer Overflow VulnerabilityEPSS 1.2%CVE-2023-5841CRITICALOpenEXR Heap Overflow in Scanline Deep Data ParsingEPSS 1.2%CVE-2020-7828HIGHDaviewIndy Heap-based Buffer Overflow VulnerabilityEPSS 1.2%CVE-2021-24041—A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could haEPSS 1.2%CVE-2020-11061MEDIUMHeap-based Buffer Overflow in Bareos DirectorEPSS 1.2%CVE-2023-3430HIGHOpenimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppEPSS 1.2%CVE-2019-9136HIGHDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format fEPSS 1.2%CVE-2023-7158HIGHMicroPython objslice.c slice_indices heap-based overflowEPSS 1.2%CVE-2023-36793HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-35350HIGHWindows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityEPSS 1.2%