Weaknesses of type CWE-787

5,843 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2021-28592HIGHAdobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 1.9%CVE-2025-29384CRITICALIn Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to EPSS 1.9%CVE-2021-28591HIGHAdobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 1.9%CVE-2019-13545—In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, whicEPSS 1.9%CVE-2021-43755HIGHAdobe After Effects Memory Corruption could lead to Arbitrary Code ExecutionEPSS 1.9%CVE-2017-6867—A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 beEPSS 1.9%CVE-2021-46634HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. UEPSS 1.9%CVE-2021-27390—A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loadeEPSS 1.9%CVE-2019-13544—Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially cEPSS 1.9%CVE-2021-26562CRITICALOut-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle EPSS 1.9%CVE-2020-12762HIGHjson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.EPSS 1.9%CVE-2021-34318—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll libEPSS 1.9%CVE-2020-1907—A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior EPSS 1.9%CVE-2022-20411HIGHIn avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execEPSS 1.9%CVE-2021-39825HIGHAdobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 1.9%CVE-2026-7838HIGHUltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason lengthEPSS 1.9%CVE-2022-32886HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. ProEPSS 1.9%CVE-2021-27410—The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution on the Welch Allyn meEPSS 1.9%CVE-2022-46569HIGHD-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanREPSS 1.9%CVE-2021-34305—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll libEPSS 1.9%