Falhas do tipo CWE-122

3.737 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2022-2566CRITICALHeap-memory write in FFMPEGEPSS 0.8%CVE-2025-49744HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-4892HIGHCVE-2026-4892EPSS 0.8%CVE-2022-1244HIGHheap-buffer-overflow in radareorg/radare2EPSS 0.8%CVE-2020-10064HIGHImproper Input Frame Validation in ieee802154 ProcessingEPSS 0.8%CVE-2020-10646—Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parEPSS 0.8%CVE-2021-31986—User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crasheEPSS 0.8%CVE-2022-46289CRITICALMultiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. AEPSS 0.8%CVE-2022-46290CRITICALMultiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. AEPSS 0.8%CVE-2026-97753HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-21095CRITICALHeap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitEPSS 0.8%CVE-2025-20680CRITICALIn Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilEPSS 0.8%CVE-2026-21096CRITICALHeap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbiEPSS 0.8%CVE-2023-5686MEDIUMHeap-based Buffer Overflow in radareorg/radare2EPSS 0.8%CVE-2025-32713HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-69985HIGHWindows libarchive Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-57087HIGHMicrosoft Windows Media Foundation Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-49164HIGHWindows Active Directory Domain Services Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-12819MEDIUMA heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 aEPSS 0.8%CVE-2026-32316HIGHjq: Integer overflow in jvp_string_append() allows Heap-based Buffer OverflowEPSS 0.8%