Weaknesses of type CWE-787

5,843 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2022-28844HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28272HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28278HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28839HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2019-5092HIGHAn exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0EPSS 2.5%CVE-2019-6743HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. UserEPSS 2.4%CVE-2026-11645HIGHOut of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sanEPSS 2.4%KEVCVE-2022-42842CRITICALThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS BiEPSS 2.4%CVE-2020-7553—A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution EPSS 2.4%CVE-2021-21053HIGHAdobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code ExecutionEPSS 2.4%CVE-2022-24097HIGHAdobe After Effects Out-of-bounds Write could lead to Arbitrary code executionEPSS 2.4%CVE-2022-23205HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.4%CVE-2022-23282HIGHPaint 3D Remote Code Execution VulnerabilityEPSS 2.4%CVE-2022-30114HIGHA heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, aEPSS 2.4%CVE-2024-20726HIGH[TianfuCup] JP2K Image Parsing Out-Of-Bounds WriteEPSS 2.4%CVE-2022-40876CRITICALIn Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflEPSS 2.4%CVE-2021-45056HIGHAdobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.4%CVE-2021-43024HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2019-19378HIGHIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/EPSS 2.3%CVE-2020-9818HIGHAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchEPSS 2.3%KEV