Falhas do tipo CWE-122

3.190 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2026-56003HIGHlibXfont2 computeProps Property Buffer Heap Buffer OverflowEPSS 0.6%CVE-2024-49072HIGHWindows Task Scheduler Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-2049HIGHGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-21354HIGHMicrosoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-2050HIGHGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-4781HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2026-5474MEDIUMNASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflowEPSS 0.6%CVE-2026-49035CRITICALStack-based Buffer Overflow in MZ Automation libIEC61850EPSS 0.6%CVE-2026-24405HIGHiccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()EPSS 0.6%CVE-2026-24412HIGHiccDEV has Heap Buffer Overflow in icCurvesFromXml()EPSS 0.6%CVE-2024-20739HIGHZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-55192CRITICALOpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char consEPSS 0.6%CVE-2026-24406HIGHiccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()EPSS 0.6%CVE-2025-21414HIGHWindows Core Messaging Elevation of Privileges VulnerabilityEPSS 0.6%CVE-2026-84268HIGHGvfs: sftp: heap-based buffer overflow in read_reply()EPSS 0.6%CVE-2025-49696HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-36408HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-21184HIGHWindows Core Messaging Elevation of Privileges VulnerabilityEPSS 0.6%CVE-2024-46461HIGHVLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciousEPSS 0.6%CVE-2023-50739HIGHA buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.EPSS 0.6%