Weaknesses of type CWE-787

5,841 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2020-17403HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%CVE-2022-3699HIGH A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior toEPSS 4.2%CVE-2020-24411HIGHAdobe Illustrator PDF File Parsing Out-Of-Bounds Write VulnerabilityEPSS 4.2%CVE-2019-1213CRITICALWindows DHCP Server Remote Code Execution VulnerabilityEPSS 4.2%CVE-2018-20253—In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive EPSS 4.2%CVE-2025-2761HIGHGIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.2%CVE-2022-41674HIGHAn issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80EPSS 4.1%CVE-2021-21054HIGHAdobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 4.1%CVE-2019-10961—In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supEPSS 4.1%CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2022-31003CRITICALHeap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIPEPSS 4.1%CVE-2022-24091HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.1%CVE-2020-10825CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300BEPSS 4.1%CVE-2020-10824CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices beforEPSS 4.1%CVE-2024-20756HIGHAdobe Bridge 2024 Out of Bound Write Remote Code Execution VulnerabilityEPSS 4.1%CVE-2021-21094HIGHAdobe Bridge PDF File Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code executionEPSS 4.0%CVE-2021-21095HIGHAdobe Bridge TTF Font Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code executionEPSS 4.0%CVE-2022-39260HIGHGit vulnerable to Remote Code Execution via Heap overflow in `git shell`EPSS 4.0%CVE-2021-21052HIGHAdobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 4.0%CVE-2021-28622HIGHAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.0%