Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2026-0822MEDIUMquickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflowEPSS 0.5%CVE-2022-1925—DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_deEPSS 0.5%CVE-2025-4096HIGHHeap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a EPSS 0.5%CVE-2024-46264HIGHcute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.EPSS 0.5%CVE-2023-47118HIGHHeap buffer overflow in T64 codec decompressionEPSS 0.5%CVE-2024-40754MEDIUMHeap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects EscargEPSS 0.5%CVE-2024-20522MEDIUMCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service VulnerabilitiesEPSS 0.5%CVE-2025-53155HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-53723HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-26284MEDIUMImageMagick has heap overflow in pcd decoder that leads to out of bounds read.EPSS 0.5%CVE-2023-44428HIGHMuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-40691HIGHPacket of death for DNSCrypt over TCPEPSS 0.5%CVE-2026-67860HIGHopen62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memEPSS 0.5%CVE-2026-38347HIGHA heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to causEPSS 0.5%CVE-2026-33986HIGHFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB WriteEPSS 0.5%CVE-2026-33633HIGHKitty has a Heap Buffer Overflow in its Graphics Protocol HandlerEPSS 0.5%CVE-2026-77102HIGHCommServe Denial of ServiceEPSS 0.5%CVE-2026-75893HIGHHeap based buffer overflow at ipaccess_proxy_read_msg()EPSS 0.5%CVE-2026-18281HIGHSony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18282HIGHSony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%