Weaknesses of type CWE-787

5,142 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2018-10483—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 2.6%CVE-2022-28277HIGHAdobe Photoshop PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.6%CVE-2026-7840CRITICALUltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)EPSS 2.6%CVE-2018-7509—WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could EPSS 2.6%CVE-2020-28386—A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). AffectedEPSS 2.6%CVE-2020-28382—A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). AffectedEPSS 2.6%CVE-2020-28381—A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). AffectedEPSS 2.6%CVE-2021-21063HIGHAcrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.6%CVE-2021-21058HIGHAcrobat Reader DC Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.6%CVE-2021-21059HIGHAcrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.6%CVE-2021-21062HIGHAcrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 2.6%CVE-2022-24501HIGHVP9 Video Extensions Remote Code Execution VulnerabilityEPSS 2.6%CVE-2021-45956CRITICALDnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-EPSS 2.6%CVE-2021-22647—Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1EPSS 2.6%CVE-2022-28281HIGHIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bouEPSS 2.6%CVE-2020-14315—A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when haEPSS 2.6%CVE-2022-35667HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-24369HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaEPSS 2.5%CVE-2022-24361HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaEPSS 2.5%CVE-2020-27287—Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allEPSS 2.5%