Falhas do tipo CWE-122

3.737 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2024-38152HIGHWindows OLE Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-58447CRITICALrAthena has heap-based buffer overflow in login serverEPSS 0.9%CVE-2026-105717HIGHMicrosoft Office Access Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-84015CRITICALRemote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-23384HIGHMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-36730HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-97815CRITICALWindows Error Reporting Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-85798HIGHWindows Distributed File System (DFS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-96113CRITICALWindows Domain Name Service Remote Code Execution VulnerabilityEPSS 0.9%CVE-2019-14814MEDIUMThere is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, thaEPSS 0.9%CVE-2026-62735HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-30259HIGHFastDDS heap buffer overflow when publisher sends malformed packetEPSS 0.9%CVE-2025-58050MEDIUMPCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCSEPSS 0.9%CVE-2024-32664MEDIUMSuricata's base64 contains an out of bounds writeEPSS 0.9%CVE-2024-29161HIGHHDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and cEPSS 0.9%CVE-2026-97748HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-97007HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-97004HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-97768HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-97763HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.9%