Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2022-38414HIGHAdobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-20777HIGHA heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master EPSS 0.5%CVE-2025-54907HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-34488HIGHNanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.EPSS 0.5%CVE-2025-49697HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18585MEDIUMGL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflowEPSS 0.5%CVE-2025-2756MEDIUMOpen Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflowEPSS 0.5%CVE-2026-24679HIGHFreeRDP has a heap-buffer-overflow in urb_select_interfaceEPSS 0.5%CVE-2023-50246MEDIUMjq has heap-buffer-overflow vulnerability in the function decToString in decNumber.cEPSS 0.5%CVE-2026-34501HIGHApache Portable Runtime Utility: Heap buffer overflow in APR redis clientEPSS 0.5%CVE-2026-34502HIGHApache Portable Runtime Utility: Heap buffer overflow in APR memcached clientEPSS 0.5%CVE-2026-10849HIGHHeap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response bodyEPSS 0.5%CVE-2025-62470HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-65079MEDIUMHeap-based buffer overflow vulnerability in Postscript interpreterEPSS 0.5%CVE-2026-78948CRITICALBuffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox viaEPSS 0.5%CVE-2026-87527CRITICALBuffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox viaEPSS 0.5%CVE-2026-87654CRITICALBuffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside tEPSS 0.5%CVE-2026-76036CRITICALBuffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside tEPSS 0.5%CVE-2026-79130CRITICALBuffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox viaEPSS 0.5%CVE-2024-14043MEDIUMOpen5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflowEPSS 0.5%