Weaknesses of type CWE-787

5,142 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2021-27488—Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior EPSS 2.0%CVE-2021-46635HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. UEPSS 2.0%CVE-2022-47379HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 2.0%CVE-2019-11037MEDIUMOut of bounds memory write in PHP Imagick extensionEPSS 2.0%CVE-2023-3935CRITICALWibu: Buffer Overflow in CodeMeter RuntimeEPSS 2.0%CVE-2022-24786CRITICALPotential out-of-bound read/write in PJSIPEPSS 2.0%CVE-2021-43756HIGHAdobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code ExecutionEPSS 2.0%CVE-2019-5088HIGHAn exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file canEPSS 2.0%CVE-2022-23985HIGHICSA-22-055-01 FATEK Automation FvDesignerEPSS 2.0%CVE-2018-14632HIGHAn out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before EPSS 2.0%CVE-2021-34343MEDIUMBuffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloudEPSS 1.9%CVE-2021-46817HIGHAdobe Media Encoder M4A file memory corruption vulnerability could lead to remote code executionEPSS 1.9%CVE-2023-40890CRITICALA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to iEPSS 1.9%CVE-2021-34876HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%CVE-2021-34878HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%CVE-2023-25564MEDIUMGSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 stringsEPSS 1.9%CVE-2021-28592HIGHAdobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 1.9%CVE-2021-28591HIGHAdobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 1.9%CVE-2025-29384CRITICALIn Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to EPSS 1.9%CVE-2019-13545—In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, whicEPSS 1.9%