Weaknesses of type CWE-787

5,202 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2021-39218MEDIUMOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in WasmtimeEPSS 0.3%CVE-2022-47519HIGHAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/micEPSS 0.3%CVE-2025-24257HIGHAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15EPSS 0.3%CVE-2025-58750HIGHrAthena missing bound check in chclif_parse_moveCharSlotEPSS 0.3%CVE-2018-25252MEDIUMFTP Voyager 16.2.0 Denial of Service via Malformed Site ProfileEPSS 0.3%CVE-2018-9380HIGHIn l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalEPSS 0.3%CVE-2023-33613MEDIUMaxTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability alEPSS 0.3%CVE-2025-27182HIGHAfter Effects | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2025-27183HIGHAfter Effects | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2026-24800CRITICALA heap-based buffer over-read or buffer overflow in tildearrow/furnaceEPSS 0.3%CVE-2024-13048HIGHAshlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-37337HIGHKofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-37334HIGHKofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-18511HIGHIBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets ExtensionEPSS 0.3%CVE-2023-37336HIGHKofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-30775MEDIUMA vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.cEPSS 0.3%CVE-2024-13046HIGHAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-39394HIGHAdobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-21597HIGHAdobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-44245HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, mEPSS 0.3%