Weaknesses of type CWE-787

5,843 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2021-34932HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2021-34923HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2021-34924HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2021-34928HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2021-34935HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2021-34926HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2024-20727HIGH[TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000EPSS 2.0%CVE-2019-5084HIGHAn exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF imageEPSS 2.0%CVE-2021-27488—Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior EPSS 2.0%CVE-2021-46635HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. UEPSS 2.0%CVE-2022-47379HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 2.0%CVE-2019-11037MEDIUMOut of bounds memory write in PHP Imagick extensionEPSS 2.0%CVE-2023-3935CRITICALWibu: Buffer Overflow in CodeMeter RuntimeEPSS 2.0%CVE-2026-32203HIGH.NET and Visual Studio Denial of Service VulnerabilityEPSS 2.0%CVE-2019-5088HIGHAn exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file canEPSS 2.0%CVE-2022-23985HIGHICSA-22-055-01 FATEK Automation FvDesignerEPSS 2.0%CVE-2022-40918CRITICALBuffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote codEPSS 2.0%CVE-2021-34343MEDIUMBuffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloudEPSS 1.9%CVE-2023-40890CRITICALA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to iEPSS 1.9%CVE-2023-25564MEDIUMGSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 stringsEPSS 1.9%