Falhas do tipo CWE-122

3.179 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2025-29962HIGHWindows Media Remote Code Execution VulnerabilityEPSS 14.3%CVE-2019-18240—In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotelyEPSS 14.3%CVE-2024-30085HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 14.3%CVE-2021-39863HIGHAdobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 13.2%CVE-2022-0714HIGHHeap-based Buffer Overflow in vim/vimEPSS 12.7%CVE-2024-37080CRITICALvCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access toEPSS 12.5%CVE-2023-28218HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 12.3%CVE-2019-15678—TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This aEPSS 12.2%CVE-2019-15679—TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.EPSS 11.8%CVE-2018-14618HIGHcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hasEPSS 11.1%CVE-2026-9256CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 10.9%CVE-2023-23376HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.9%KEVCVE-2024-38054HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 10.4%CVE-2021-28558HIGHAdobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code executionEPSS 10.4%CVE-2025-21333HIGHWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityEPSS 10.0%KEVCVE-2026-8711CRITICALNGINX JavaScript vulnerabilityEPSS 9.7%CVE-2025-21376HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 9.4%CVE-2024-26229HIGHWindows CSC Service Elevation of Privilege VulnerabilityEPSS 9.4%CVE-2018-1123LOWprocps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard pEPSS 9.1%CVE-2019-14896HIGHA heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacEPSS 8.7%