Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2026-66810MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-28798MEDIUMOut-of-bounds write to heap in pacparserEPSS 0.4%CVE-2026-28519HIGHarduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code ExecutionEPSS 0.4%CVE-2026-20452HIGHIn wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code eEPSS 0.4%CVE-2026-38427HIGHAn issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The ContEPSS 0.4%CVE-2026-21246HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-12912HIGHLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageEPSS 0.4%CVE-2026-21239HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-21245HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-9951HIGHRemote code execution via Heap Buffer Overflow in FFmpeg JPEG2000EPSS 0.4%CVE-2024-6258MEDIUMBT: Missing length checks of net_buf in rfcomm_handle_dataEPSS 0.4%CVE-2026-21236HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-38071HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), TeamcenEPSS 0.4%CVE-2025-62689HIGHNULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the EPSS 0.4%CVE-2026-61368MEDIUMWindows Hyper-V Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-0819HIGHHeap-based Buffer Overflow in gpac/gpacEPSS 0.4%CVE-2026-24288MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-1861HIGHHeap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption viaEPSS 0.4%CVE-2023-35304HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-35305HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.4%