Weaknesses of type CWE-787

5,212 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2025-7990HIGHAshlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-30102MEDIUMDell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. A local low privileged attacker couEPSS 0.2%CVE-2025-7988HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7987HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-32366HIGHAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, EPSS 0.2%CVE-2025-60015MEDIUMF5OS out-of-bounds write vulnerabilityEPSS 0.2%CVE-2026-34544HIGHOpenEXR: integer overflow to OOB write in uncompress_b44_impl()EPSS 0.2%CVE-2025-61553HIGHAn out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows lEPSS 0.2%CVE-2023-51452LOWA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2026-0959MEDIUMOut-of-bounds Write in WiresharkEPSS 0.2%CVE-2024-3933MEDIUMEclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a bufferEPSS 0.2%CVE-2024-32895CRITICALIn BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation oEPSS 0.2%CVE-2022-23087HIGHBhyve e82545 device emulation out-of-bounds writeEPSS 0.2%CVE-2024-7305HIGHDWF Vulnerability in Autodesk Desktop SoftwareEPSS 0.2%CVE-2019-25681HIGHXlight FTP Server 3.9.1 SEH Overwrite Buffer OverflowEPSS 0.2%CVE-2024-8593HIGHAutodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Code Execution VulnerabilityEPSS 0.2%CVE-2019-25701HIGHEasy Video to iPod Converter 1.6.20 Local Buffer Overflow SEHEPSS 0.2%CVE-2024-7672HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.2%CVE-2024-9996HIGHAutodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Code Execution VulnerabilityEPSS 0.2%CVE-2024-8596HIGHAutodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Code Execution VulnerabilityEPSS 0.2%