Weaknesses of type CWE-787

5,210 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2024-34086HIGHA vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), TeamceEPSS 0.2%CVE-2024-52570HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2026-12519MEDIUMOut-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsingEPSS 0.2%CVE-2022-32961MEDIUMHiCOS’ client-side citizen digital certificate - Stack Buffer OverflowEPSS 0.2%CVE-2022-32960MEDIUMHiCOS’ client-side citizen digital certificate - Stack Buffer OverflowEPSS 0.2%CVE-2024-52565HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2022-32959MEDIUMHiCOS’ client-side citizen digital certificate - Stack Buffer OverflowEPSS 0.2%CVE-2023-3487HIGHInteger overflow in Silicon Labs Gecko Bootloader leads to unbounded memory accessEPSS 0.2%CVE-2026-87118MEDIUMBotslab G980H Dashcams Out-of-bounds WriteEPSS 0.2%CVE-2023-23579HIGHDatakit CrossCAD/WareEPSS 0.2%CVE-2024-52566HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2025-46715HIGHSandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)EPSS 0.2%CVE-2022-35217HIGHNHI card’s web service component - Stack-based Buffer Overflow-1EPSS 0.2%CVE-2025-47108HIGHSubstance3D - Painter | Out-of-bounds Write (CWE-787)EPSS 0.2%CVE-2024-11157HIGHRockwell Automation Third Party Vulnerability in ArenaEPSS 0.2%CVE-2022-42281MEDIUMNVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bEPSS 0.2%CVE-2024-58069HIGHrtc: pcf85063: fix potential OOB write in PCF85063 NVMEM readEPSS 0.2%CVE-2024-0110MEDIUMNVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed EEPSS 0.2%CVE-2026-92177HIGHpdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-92179HIGHpdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%