Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2019-14815HIGHA vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.EPSS 0.5%CVE-2026-12244HIGHHeap overflow and crash with crafted SVCB RREPSS 0.5%CVE-2022-48512—Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decodinEPSS 0.5%CVE-2026-14940MEDIUM389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnEPSS 0.5%CVE-2021-3966CRITICALUsb bluetooth device ACL read cb buffer overflowEPSS 0.5%CVE-2026-11610HIGH389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindEPSS 0.5%CVE-2026-32316HIGHjq: Integer overflow in jvp_string_append() allows Heap-based Buffer OverflowEPSS 0.5%CVE-2025-62201HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-49840CRITICALFreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsingEPSS 0.5%CVE-2026-24682HIGHFreeRDP has a Heap-buffer-overflow in audio_formats_freeEPSS 0.5%CVE-2024-33505MEDIUMA heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 throughEPSS 0.5%CVE-2026-5187LOWHeap Out-of-Bounds Write in DecodeObjectId() in wolfSSLEPSS 0.5%CVE-2025-53732HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42076HIGHPDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-69469MEDIUMWindows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-9365MEDIUMEttercap GG Dissector ec_gg.c FUNC_DECODER heap-based overflowEPSS 0.5%CVE-2026-49804MEDIUMWindows USB Video Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-42077HIGHPDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-44236HIGHrabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_maxEPSS 0.5%CVE-2024-8193HIGHHeap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to EPSS 0.5%