Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2026-86870MEDIUMA heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mEPSS 0.5%CVE-2026-57164HIGHPJSIP: Heap overflow in the HTTP clientEPSS 0.5%CVE-2026-32741HIGHlibheif has a heap buffer overflow in decode_mask_image()EPSS 0.4%CVE-2023-28225HIGHWindows NTLM Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-54091HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-23086CRITICALmpr/mps/mpt driver ioctl heap out-of-bounds writeEPSS 0.4%CVE-2025-15247MEDIUMgmg137 snap7-rs client.rs download heap-based overflowEPSS 0.4%CVE-2022-4141HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.4%CVE-2022-2069HIGH Datalogics APDFL library Heap-based Buffer OverflowEPSS 0.4%CVE-2025-54894HIGHLocal Security Authority Subsystem Service Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-2991—A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of theEPSS 0.4%CVE-2026-54715HIGHGoAccess: Heap Out-of-Bounds Write in parse_browser()EPSS 0.4%CVE-2026-44251MEDIUMWazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent messageEPSS 0.4%CVE-2026-76046HIGHBuffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer pEPSS 0.4%CVE-2024-49552HIGHMedia Encoder | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2026-44950CRITICALfs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2EPSS 0.4%CVE-2024-20516MEDIUMCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service VulnerabilitiesEPSS 0.4%CVE-2024-20517MEDIUMCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service VulnerabilitiesEPSS 0.4%CVE-2026-11727HIGHIBM MQ for HPE NonStop is vulnerable to a denial of service issueEPSS 0.4%CVE-2021-31428HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker muEPSS 0.4%