Weaknesses of type CWE-787

5,212 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2026-47626HIGHNVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.EPSS 0.2%CVE-2026-30983HIGHiccDEV has a stack buffer overflow in icFixXml()EPSS 0.2%CVE-2026-30985HIGHiccDEV has a heap-based buffer overflow write in CIccMatrixMath::SetRange()EPSS 0.2%CVE-2026-23793LOWAn issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the cEPSS 0.2%CVE-2023-3495HIGHOut-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)EPSS 0.2%CVE-2026-31795HIGHiccDEV has a stack buffer overflow write in CIccXform3DLut::Apply()EPSS 0.2%CVE-2026-31796HIGHiccDEV has a heap-based buffer overflow in icCurvesFromXml()EPSS 0.2%CVE-2026-81433HIGHFireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code ExecutionEPSS 0.2%CVE-2026-30987HIGHiccDEV has a stack buffer overflow in CIccTagNum<(icTagTypeSignature)>::GetValues()EPSS 0.2%CVE-2023-39985HIGHOut-of-bounds Write Vulnerability in Hitachi EH-VIEW (Designer)EPSS 0.2%CVE-2025-4877MEDIUMLibssh: write beyond bounds in binary to base64 conversion functionsEPSS 0.2%CVE-2026-24193HIGHNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful explEPSS 0.2%CVE-2025-30418HIGHOut of Bounds Write in CheckPins() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30417HIGHOut of Bounds Write in Library!DecodeBase64() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-5917LOWLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.cEPSS 0.2%CVE-2025-21966HIGHdm-flakey: Fix memory corruption in optional corrupt_bio_byte featureEPSS 0.2%CVE-2023-0182HIGHNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of EPSS 0.2%CVE-2024-27376MEDIUMAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_EPSS 0.2%CVE-2026-21327HIGHAfter Effects | Out-of-bounds Write (CWE-787)EPSS 0.2%CVE-2024-27379MEDIUMAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_EPSS 0.2%