Falhas do tipo CWE-122

3.195 resultados

Estouro de heap

Ocorre quando código escreve mais dados do que o espaço alocado em uma região de memória dinâmica (heap), sobrescrevendo dados adjacentes. Um atacante pode explorar isso para corromper estruturas de dados críticas, contornar proteções de segurança ou executar código arbitrário.

Exemplo

Um servidor web aloca 256 bytes para armazenar um nome de usuário, mas copia 512 bytes de uma requisição sem validação. Os 256 bytes extras sobrescrevem ponteiros ou metadados do heap, permitindo execução de código ou negação de serviço.

Como mitigar

Use funções seguras que respeitam limites (strcpy_s, memcpy com tamanho verificado em runtime). Validar e limitar o tamanho de entrada antes de copiar. Ativar proteções como ASLR, stack canaries e ferramentas de sanitização (AddressSanitizer) em desenvolvimento.

CVE-2023-26413HIGHZDI-CAN-20315: Adobe Substance 3D Designer USD File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-29283HIGHZDI-CAN-20361: Adobe Substance 3D Painter USD File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-50343CRITICALAn issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not mEPSS 0.4%CVE-2025-59242HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-21594HIGHAdobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-29069HIGHA heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmEPSS 0.4%CVE-2026-81851MEDIUMFireware OS Heap-Based Buffer Overflow in iked Allows Denial of ServiceEPSS 0.4%CVE-2023-42039HIGHKofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-58547MEDIUMWindows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-27198HIGHPhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2026-38754MEDIUMA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplyEPSS 0.4%CVE-2025-27199HIGHAnimate | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2024-49545HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2025-67433HIGHA heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (EPSS 0.4%CVE-2025-27195HIGHMedia Encoder | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2023-1448MEDIUMGPAC mpegts.c gf_m2ts_process_sdt heap-based overflowEPSS 0.4%CVE-2026-13072CRITICALMongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory CorruptionEPSS 0.4%CVE-2024-24335HIGHA heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.EPSS 0.4%CVE-2024-24334HIGHA heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.EPSS 0.4%CVE-2026-48131HIGHVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number ZeroEPSS 0.4%