Falhas do tipo CWE-122

3.190 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2020-15200MEDIUMSegfault in TensorflowEPSS 0.9%CVE-2024-5493HIGHHeap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption viaEPSS 0.9%CVE-2023-50364MEDIUMQTS, QuTS heroEPSS 0.9%CVE-2026-64620CRITICALFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_commonEPSS 0.9%CVE-2025-15059HIGHGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-57803HIGHImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowEPSS 0.8%CVE-2025-21390HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-33146HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-72933HIGHMicrosoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-25668CRITICALTensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operationEPSS 0.8%CVE-2026-62785HIGHWindows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69495HIGHWindows Event Logging Service Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69494HIGHWindows Event Logging Service Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-26111HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-41438MEDIUMA heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoSEPSS 0.8%CVE-2025-49676HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-21256MEDIUMWindows Digital Media Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-49672HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-23582MEDIUM Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to EPSS 0.8%CVE-2026-3085HIGHGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%