Weaknesses of type CWE-787

5,841 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2020-14305—An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connectEPSS 5.2%CVE-2020-15629HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 5.1%CVE-2020-1910—A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed EPSS 5.1%CVE-2022-22629HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iEPSS 5.0%CVE-2020-36518HIGHjackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.EPSS 4.9%CVE-2020-3119HIGHCisco NX-OS Software Cisco Discovery Protocol Remote Code Execution VulnerabilityEPSS 4.8%CVE-2012-2806HIGHHeap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of serviceEPSS 4.8%CVE-2020-1027HIGHAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oEPSS 4.7%KEVCVE-2020-13556CRITICALAn out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c7EPSS 4.7%CVE-2021-21086HIGHAdobe Reader CoolType Arbitrary Stack ManipulationEPSS 4.7%CVE-2021-3634—A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the seEPSS 4.7%CVE-2021-31452HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.6%CVE-2021-21071HIGHAdobe Animate memory corruption vulnerabilityEPSS 4.6%CVE-2019-8246CRITICALAdobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary codEPSS 4.6%CVE-2019-7287HIGHA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to exeEPSS 4.6%KEVCVE-2022-24092HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.5%CVE-2020-10823CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1EPSS 4.4%CVE-2023-33629HIGHH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.EPSS 4.4%CVE-2023-48316CRITICALAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-17403HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%