Weaknesses of type CWE-122

2,554 results

Transbordamento de heap (heap overflow)

Ocorre quando um programa escreve dados além dos limites de um buffer alocado dinamicamente na memória heap, sobrescrevendo dados adjacentes ou metadados do alocador. Isso permite que um atacante corrompa estruturas críticas, execute código arbitrário ou cause travamento da aplicação.

Example

Uma função recebe um tamanho de entrada sem validar e copia para um buffer: `strcpy(heap_buffer, user_input)` sem verificar se user_input cabe. Se o usuário enviar 1000 bytes para um buffer de 256, o overflow sobrescreve estruturas próximas no heap e pode ser explorado para RCE.

How to mitigate

Use funções seguras de cópia (`strncpy`, `strlcpy`), valide e limite o tamanho da entrada antes de copiar, e considere usar linguagens com gerenciamento automático de memória ou ferramentas como AddressSanitizer durante testes para detectar overflows.

CVE-2015-3113HIGHHeap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11EPSS 99.9%KEVCVE-2024-26256HIGHLibarchive Remote Code Execution VulnerabilityEPSS 87.9%CVE-2020-25687—A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before itEPSS 86.7%CVE-2009-3459HIGHHeap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to exeEPSS 86.6%KEVCVE-2021-21017HIGHAcrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 86.3%KEVCVE-2020-25683—A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before itEPSS 86.0%CVE-2023-27997CRITICALA heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below,EPSS 85.7%KEVCVE-2023-4911HIGHGlibc: buffer overflow in ld.so leading to privilege escalationEPSS 81.4%KEVCVE-2020-25681—A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating EPSS 81.2%CVE-2023-36824HIGHHeap overflow in COMMAND GETKEYS and ACL evaluation in RedisEPSS 77.4%CVE-2020-6146HIGHAn exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing theEPSS 77.1%CVE-2024-38077CRITICALWindows Remote Desktop Licensing Service Remote Code Execution VulnerabilityEPSS 75.4%CVE-2022-35711CRITICALAdobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 73.5%CVE-2024-20697HIGHWindows libarchive Remote Code Execution VulnerabilityEPSS 72.2%CVE-2024-12084CRITICALRsync: heap buffer overflow in rsync due to improper checksum length handlingEPSS 72.1%CVE-2023-0210—A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.EPSS 71.7%CVE-2020-25682—A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets beEPSS 70.8%CVE-2021-26691—Apache HTTP Server mod_session response handling heap overflowEPSS 68.3%CVE-2021-28560HIGHAdobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code executionEPSS 66.9%CVE-2026-42945CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 66.0%