Falhas do tipo CWE-122

3.191 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2024-35434HIGHIrontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerabEPSS 0.6%CVE-2025-40906CRITICALBSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilitiesEPSS 0.6%CVE-2026-42992HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-42993HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-6259HIGHBT: HCI: adv_ext_report Improper discarding in adv_ext_reportEPSS 0.6%CVE-2026-44799HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-77898HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-45421HIGHZoom Apps - Buffer OverflowEPSS 0.6%CVE-2022-1733MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2022-45188HIGHNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides reEPSS 0.6%CVE-2024-38142HIGHWindows Secure Kernel Mode Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-50538HIGHlibvncclient Tight decoder has an attacker-controlled heap out-of-bounds writeEPSS 0.6%CVE-2024-7967HIGHHeap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via aEPSS 0.6%CVE-2026-49841CRITICALFreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body readEPSS 0.6%CVE-2026-3548HIGHBuffer overflow in CRL number parsing in wolfSSLEPSS 0.6%CVE-2006-10002CRITICALXML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashesEPSS 0.6%CVE-2024-43527HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-58095HIGHppp(8): incorrect length calculation in mp_Enddisc()EPSS 0.6%CVE-2023-32027HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-32025HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 0.6%