目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-122 堆缓冲区溢出 类漏洞列表 2306

CWE-122 堆缓冲区溢出 类弱点 2306 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-122 堆缓冲区溢出属于内存安全漏洞，指写入数据超出在堆内存（如通过 malloc 分配）中分配的缓冲区边界。攻击者利用此漏洞可覆盖相邻内存数据，导致程序崩溃或执行任意代码，从而获取系统控制权。开发者应避免此类风险，需严格验证输入长度，确保写入操作不超出缓冲区上限，并使用现代安全语言或库来自动管理内存边界。

MITRE CWE 官方描述
CWE：CWE-122 基于堆的缓冲区溢出（Heap-based Buffer Overflow） 英文：堆溢出（Heap overflow）条件是一种缓冲区溢出（Buffer overflow），其中可被覆盖的缓冲区（Buffer）是在内存的堆（Heap）部分分配的，通常意味着该缓冲区是使用 malloc() 等例程分配的。
常见影响 (3)
AvailabilityDoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
Integrity, Confidentiality, Availability, Access ControlExecute Unauthorized Code or Commands, Bypass Protection Mechanism, Modify Memory
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy. Besides important user data, heap-based overflows can be used to overwrite function pointers that may be living in memory, pointing it to the attacker's code. Eve…
Integrity, Confidentiality, Availability, Access Control, OtherExecute Unauthorized Code or Commands, Bypass Protection Mechanism, Other
When the consequence is arbitrary code execution, this can often be used to subvert any other security service.
缓解措施 (5)
Pre-design: Use a language or compiler that performs automatic bounds checking.
Architecture and DesignUse an abstraction library to abstract away risky APIs. Not a complete solution.
Operation, Build and CompilationUse automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
Operation, Build and CompilationRun or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
ImplementationImplement and perform bounds checking on input.
代码示例 (2)
While buffer overflow examples can be rather complex, it is possible to have very simple, yet still exploitable, heap-based buffer overflows:
#define BUFSIZE 256 int main(int argc, char **argv) { char *buf; buf = (char *)malloc(sizeof(char)*BUFSIZE); strcpy(buf, argv[1]); }
Bad · C
This example applies an encoding procedure to an input string and stores it into a buffer.
char * copy_input(char *user_supplied_string){ int i, dst_index; char *dst_buf = (char*)malloc(4*sizeof(char) * MAX_SIZE); if ( MAX_SIZE <= strlen(user_supplied_string) ){ die("user string too long, die evil hacker!"); } dst_index = 0; for ( i = 0; i < strlen(user_supplied_string); i++ ){ if( '&' == user_supplied_string[i] ){ dst_buf[dst_index++] = '&'; dst_buf[dst_index++] = 'a'; dst_buf[dst_index++] = 'm'; dst_buf[dst_index++] = 'p'; dst_buf[dst_index++] = ';'; } else if ('<' == user_supplied_string[i] ){ /* encode to &lt; */ } else dst_buf[dst_index++] = user_supplied_string[i]; } return ds
Bad · C
CVE ID标题CVSS风险等级Published
CVE-2026-19385 PostgreSQL pg_dump 堆缓冲区溢出导致任意代码执行漏洞 — PostgreSQL 8.8 High2026-08-13
CVE-2026-14676 PostgreSQL pg_stat_statements 堆缓冲区溢出漏洞 — PostgreSQL 8.8 High2026-08-13
CVE-2026-14670 PostgreSQL plperl 绑定对象堆缓冲区溢出漏洞 — PostgreSQL 8.8 High2026-08-13
CVE-2026-14669 PostgreSQL to_char堆缓冲区溢出执行任意代码漏洞 — PostgreSQL 8.8 High2026-08-13
CVE-2026-14664 PostgreSQL regexp 堆缓冲区溢出可导致任意代码执行 — PostgreSQL 8.8 High2026-08-13
CVE-2026-18368 Modbusgwd 堆缓冲区溢出漏洞 — RUTOS 6.0 Medium2026-08-13
CVE-2026-19694 Wireshark 基于堆的缓冲区溢出漏洞 — Wireshark 4.7 Medium2026-08-13
CVE-2026-19004 MongoDB BI Connector ODBC驱动处理存储过程输出参数时存在内存安全问题 — BI Connector ODBC Driver 8.1 High2026-08-12
CVE-2024-14043 Open5GS 缓冲区错误漏洞 — Open5GS 6.3 Medium2026-08-11
CVE-2026-73242 FreeRDP 缓冲区错误漏洞 — FreeRDP 8.3 High2026-08-11
CVE-2026-70130 Microsoft Office 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 8.4 High2026-08-11
CVE-2026-68812 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68805 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68801 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68798 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-66810 Microsoft Office Word 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 5.5 Medium2026-08-11
CVE-2026-65796 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 5.9 Medium2026-08-11
CVE-2026-65791 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 9.8 Critical2026-08-11
CVE-2026-65790 Microsoft Windows Message Queuing 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-65774 Microsoft Windows Installer 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-65679 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 8.1 High2026-08-11
CVE-2026-64920 Microsoft Office Access 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-64915 Microsoft Office Word 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-64914 Microsoft Office Access 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-64908 Microsoft Office Access 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-64906 Microsoft Office Access 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-64898 Microsoft Office 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-63533 Microsoft Office 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-62885 Microsoft Win32k 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-62823 Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows 10 Version 1607 8.8 High2026-08-11

CWE-122（堆缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2306 条 CVE 漏洞。