目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-122 堆缓冲区溢出 类漏洞列表 2307

CWE-122 堆缓冲区溢出 类弱点 2307 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-122 堆缓冲区溢出属于内存安全漏洞，指写入数据超出在堆内存（如通过 malloc 分配）中分配的缓冲区边界。攻击者利用此漏洞可覆盖相邻内存数据，导致程序崩溃或执行任意代码，从而获取系统控制权。开发者应避免此类风险，需严格验证输入长度，确保写入操作不超出缓冲区上限，并使用现代安全语言或库来自动管理内存边界。

MITRE CWE 官方描述
CWE：CWE-122 基于堆的缓冲区溢出（Heap-based Buffer Overflow） 英文：堆溢出（Heap overflow）条件是一种缓冲区溢出（Buffer overflow），其中可被覆盖的缓冲区（Buffer）是在内存的堆（Heap）部分分配的，通常意味着该缓冲区是使用 malloc() 等例程分配的。
常见影响 (3)
AvailabilityDoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
Integrity, Confidentiality, Availability, Access ControlExecute Unauthorized Code or Commands, Bypass Protection Mechanism, Modify Memory
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy. Besides important user data, heap-based overflows can be used to overwrite function pointers that may be living in memory, pointing it to the attacker's code. Eve…
Integrity, Confidentiality, Availability, Access Control, OtherExecute Unauthorized Code or Commands, Bypass Protection Mechanism, Other
When the consequence is arbitrary code execution, this can often be used to subvert any other security service.
缓解措施 (5)
Pre-design: Use a language or compiler that performs automatic bounds checking.
Architecture and DesignUse an abstraction library to abstract away risky APIs. Not a complete solution.
Operation, Build and CompilationUse automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
Operation, Build and CompilationRun or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
ImplementationImplement and perform bounds checking on input.
代码示例 (2)
While buffer overflow examples can be rather complex, it is possible to have very simple, yet still exploitable, heap-based buffer overflows:
#define BUFSIZE 256 int main(int argc, char **argv) { char *buf; buf = (char *)malloc(sizeof(char)*BUFSIZE); strcpy(buf, argv[1]); }
Bad · C
This example applies an encoding procedure to an input string and stores it into a buffer.
char * copy_input(char *user_supplied_string){ int i, dst_index; char *dst_buf = (char*)malloc(4*sizeof(char) * MAX_SIZE); if ( MAX_SIZE <= strlen(user_supplied_string) ){ die("user string too long, die evil hacker!"); } dst_index = 0; for ( i = 0; i < strlen(user_supplied_string); i++ ){ if( '&' == user_supplied_string[i] ){ dst_buf[dst_index++] = '&'; dst_buf[dst_index++] = 'a'; dst_buf[dst_index++] = 'm'; dst_buf[dst_index++] = 'p'; dst_buf[dst_index++] = ';'; } else if ('<' == user_supplied_string[i] ){ /* encode to &lt; */ } else dst_buf[dst_index++] = user_supplied_string[i]; } return ds
Bad · C
CVE ID标题CVSS风险等级Published
CVE-2026-62823 Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows 10 Version 1607 8.8 High2026-08-11
CVE-2026-62811 Microsoft HTTP.sys 缓冲区错误漏洞 — Windows 11 version 23H2 7.8 High2026-08-11
CVE-2026-62790 Microsoft Windows SMB Server 缓冲区错误漏洞 — Windows 10 Version 1607 8.8 High2026-08-11
CVE-2026-62800 Microsoft Windows SMB Server 缓冲区错误漏洞 — Windows 10 Version 1607 8.8 High2026-08-11
CVE-2026-62781 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 8.1 High2026-08-11
CVE-2026-62799 Microsoft Windows SMB Client 缓冲区错误漏洞 — Windows 11 version 26H1 7.8 High2026-08-11
CVE-2026-62770 Microsoft Windows Shell 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-62771 Microsoft Windows Cloud Files Mini Filter Driver 缓冲区错误漏洞 — Windows 10 Version 1809 7.8 High2026-08-11
CVE-2026-62752 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-62736 Microsoft Windows DHCP Client 缓冲区错误漏洞 — Windows 11 version 23H2 7.8 High2026-08-11
CVE-2026-62732 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-62717 Microsoft Windows Message Queuing 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-62710 Microsoft Windows Device Association Service 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-62700 Microsoft Windows NTFS 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-61926 Microsoft Windows USB Driver 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-61355 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 21H2 7.8 High2026-08-11
CVE-2026-61359 Microsoft Windows Storage 缓冲区错误漏洞 — Windows 11 version 23H2 7.8 High2026-08-11
CVE-2026-61363 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 7.5 High2026-08-11
CVE-2026-58651 Microsoft Office Word 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-70347 Microsoft Windows Installer 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-70345 Microsoft Windows Installer 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-70330 Microsoft Windows DNS 缓冲区错误漏洞 — Windows 10 Version 1607 6.7 Medium2026-08-11
CVE-2026-70304 Microsoft Windows DNS 缓冲区错误漏洞 — Windows 10 Version 1607 6.7 Medium2026-08-11
CVE-2026-68815 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68807 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68800 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68796 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-68794 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-08-11
CVE-2026-66799 Microsoft Windows Key Guard 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11
CVE-2026-65814 Microsoft Windows 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High2026-08-11

CWE-122（堆缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2307 条 CVE 漏洞。