Weaknesses of type CWE-787

5,843 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2023-6231CRITICALBuffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netwoEPSS 1.4%CVE-2023-6234CRITICALBuffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attackEPSS 1.4%CVE-2023-6233CRITICALBuffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the nEPSS 1.4%CVE-2023-6229CRITICALBuffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on EPSS 1.4%CVE-2020-0069HIGHIn the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization aEPSS 1.4%KEVCVE-2026-107815HIGHMariaDB: one byte OOB write in DOS tables of the CONNECT engineEPSS 1.4%CVE-2017-2580MEDIUMAn out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or poEPSS 1.4%CVE-2022-3627MEDIUMLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:686EPSS 1.4%CVE-2026-28780CRITICALApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()EPSS 1.4%CVE-2026-40033HIGHFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassEPSS 1.4%CVE-2021-1573HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityEPSS 1.4%CVE-2021-34704HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityEPSS 1.4%CVE-2023-40186MEDIUMIntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDPEPSS 1.4%CVE-2021-1590MEDIUMCisco NX-OS Software system login block-for Denial of Service VulnerabilityEPSS 1.4%CVE-2023-24797CRITICALD-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers tEPSS 1.4%CVE-2023-27720CRITICALD-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a EPSS 1.4%CVE-2022-47385HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47386HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2023-47359—Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() anEPSS 1.3%CVE-2022-46696HIGHA memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iEPSS 1.3%