Weaknesses of type CWE-787

5,208 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2023-0970HIGHSerial API Buffer Overflow in Z/IP GatewayEPSS 0.3%CVE-2024-4080HIGHMemory Corruption Due to Improper Length Checks in LabVIEW tdcore.dllEPSS 0.3%CVE-2024-4081HIGHMemory Corruption Due to Improper Length Check in NI LabVIEWEPSS 0.3%CVE-2024-52573HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.3%CVE-2024-45774MEDIUMGrub2: reader/jpeg: heap oob write during jpeg parsingEPSS 0.3%CVE-2025-1329HIGHIBM CICS TX code executionEPSS 0.3%CVE-2024-9744HIGHTungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-50262HIGHbpf: Fix out-of-bounds write in trie_get_next_key()EPSS 0.3%CVE-2025-6659HIGHPDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-1330HIGHIBM CICS TX code executionEPSS 0.3%CVE-2024-9736HIGHTungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-6651HIGHPDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-6647HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-37644MEDIUMSWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. ThiEPSS 0.3%CVE-2025-6654HIGHPDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-56114MEDIUMdhcpcd Stack Out-of-Bounds Write in dhcp6_makemessage()EPSS 0.3%CVE-2025-64301HIGHAn out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker cEPSS 0.3%CVE-2024-9733HIGHTungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-9740HIGHTungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-9746HIGHTungsten Automation Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%