CWE-122 堆缓冲区溢出 类弱点 3203 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-122 堆缓冲区溢出属于内存安全漏洞，指写入数据超出在堆内存（如通过 malloc 分配）中分配的缓冲区边界。攻击者利用此漏洞可覆盖相邻内存数据，导致程序崩溃或执行任意代码，从而获取系统控制权。开发者应避免此类风险，需严格验证输入长度，确保写入操作不超出缓冲区上限，并使用现代安全语言或库来自动管理内存边界。
#define BUFSIZE 256 int main(int argc, char **argv) { char *buf; buf = (char *)malloc(sizeof(char)*BUFSIZE); strcpy(buf, argv[1]); }char * copy_input(char *user_supplied_string){ int i, dst_index; char *dst_buf = (char*)malloc(4*sizeof(char) * MAX_SIZE); if ( MAX_SIZE <= strlen(user_supplied_string) ){ die("user string too long, die evil hacker!"); } dst_index = 0; for ( i = 0; i < strlen(user_supplied_string); i++ ){ if( '&' == user_supplied_string[i] ){ dst_buf[dst_index++] = '&'; dst_buf[dst_index++] = 'a'; dst_buf[dst_index++] = 'm'; dst_buf[dst_index++] = 'p'; dst_buf[dst_index++] = ';'; } else if ('<' == user_supplied_string[i] ){ /* encode to < */ } else dst_buf[dst_index++] = user_supplied_string[i]; } return ds| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-21738 | Microsoft Office Visio 安全漏洞 — Microsoft Office 2019 | 7.8 | High | 2023-01-10 |
| CVE-2023-21737 | Microsoft Office Visio 安全漏洞 — Microsoft Office 2019 | 7.8 | High | 2023-01-10 |
| CVE-2023-21733 | Microsoft Windows Bind Filter Driver 竞争条件问题漏洞 — Windows Server 2022 | 7.0 | High | 2023-01-10 |
| CVE-2023-21560 | Microsoft Windows Boot Manager 安全漏洞 — Windows 10 Version 1809 | 6.6 | Medium | 2023-01-10 |
| CVE-2022-44427 | Google Android OS和unisoc部分产品缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2023-01-04 |
| CVE-2022-44428 | Google Android OS和unisoc部分产品缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2023-01-04 |
| CVE-2022-44429 | Google Android OS和unisoc部分产品缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2023-01-04 |
| CVE-2022-44430 | Google Android OS和unisoc部分产品缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2023-01-04 |
| CVE-2023-0051 | Vim 安全漏洞 — vim/vim | 7.8 | - | 2023-01-04 |
| CVE-2022-41639 | OpenImageIO 缓冲区错误漏洞 — OpenImageIO | 9.8 | - | 2022-12-23 |
| CVE-2022-41794 | OpenImageIO 缓冲区错误漏洞 — OpenImageIO | 9.8 | - | 2022-12-23 |
| CVE-2022-41838 | OpenImageIO 缓冲区错误漏洞 — OpenImageIO | 9.8 | - | 2022-12-23 |
| CVE-2022-43597 | OpenImageIO 安全漏洞 — OpenImageIO | 8.1 | - | 2022-12-23 |
| CVE-2022-43598 | OpenImageIO 缓冲区错误漏洞 — OpenImageIO | 8.1 | - | 2022-12-23 |
| CVE-2022-43599 | OpenImageIO 安全漏洞 — OpenImageIO | 8.1 | - | 2022-12-23 |
| CVE-2022-43600 | OpenImageIO 安全漏洞 — OpenImageIO | 8.1 | - | 2022-12-23 |
| CVE-2022-43601 | OpenImageIO 安全漏洞 — OpenImageIO | 8.1 | - | 2022-12-23 |
| CVE-2022-43602 | OpenImageIO 安全漏洞 — OpenImageIO | 8.1 | - | 2022-12-23 |
| CVE-2022-23547 | PJSIP 缓冲区错误漏洞 — pjproject | 6.5 | Medium | 2022-12-23 |
| CVE-2022-23537 | PJSIP 缓冲区错误漏洞 — pjproject | 6.5 | Medium | 2022-12-20 |
| CVE-2022-4584 | Bento4 安全漏洞 — Bento4 | 6.3 | Medium | 2022-12-17 |
| CVE-2022-2601 | grub2 安全漏洞 — grub2 | 8.6 | - | 2022-12-14 |
| CVE-2022-2948 | GE CIMPLICITY HMI/SCADA Software 安全漏洞 — CIMPLICITY | 7.8 | High | 2022-12-07 |
| CVE-2022-3491 | Vim 缓冲区错误漏洞 — vim/vim | 7.8 | - | 2022-12-03 |
| CVE-2022-3520 | Vim 缓冲区错误漏洞 — vim/vim | 7.8 | - | 2022-12-02 |
| CVE-2022-4141 | Vim 缓冲区错误漏洞 — vim/vim | 7.8 | - | 2022-11-25 |
| CVE-2022-20946 | Cisco Firepower Threat Defense 缓冲区错误漏洞 — Cisco Firepower Threat Defense Software | 8.6 | High | 2022-11-10 |
| CVE-2022-39136 | Siemens JT2Go和Teamcenter Visualization 缓冲区错误漏洞 — JT2Go | 7.8 | High | 2022-11-08 |
| CVE-2022-24942 | Micrium uC-HTTP 缓冲区错误漏洞 — Gecko Platform | 9.1 | Critical | 2022-11-02 |
| CVE-2022-2069 | Siemens Teamcenter Visualization 缓冲区错误漏洞 — JT2Go | 7.8 | High | 2022-10-20 |
CWE-122（堆缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 3203 条 CVE 漏洞。