Weaknesses of type CWE-787

5,843 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2020-14386MEDIUMA flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes.EPSS 1.3%CVE-2022-46700HIGHA memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iEPSS 1.3%CVE-2022-26730HIGHA memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is EPSS 1.3%CVE-2020-36885CRITICALSony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgiEPSS 1.3%CVE-2022-44804CRITICALD-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.EPSS 1.3%CVE-2023-40569MEDIUMOut-Of-Bounds Write in FreeRDPEPSS 1.3%CVE-2022-44807CRITICALD-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.EPSS 1.3%CVE-2024-42987HIGHTenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulneraEPSS 1.3%CVE-2023-22752CRITICALUnauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI ProtocolEPSS 1.3%CVE-2024-55884CRITICALIn the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack can be exhausteEPSS 1.3%CVE-2023-22751CRITICALUnauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI ProtocolEPSS 1.3%CVE-2022-46699HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iEPSS 1.3%CVE-2023-24800CRITICALD-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers toEPSS 1.3%CVE-2022-3195HIGHOut of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write vEPSS 1.3%CVE-2021-46156—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.3%CVE-2021-46160—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.3%CVE-2021-46159—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.3%CVE-2021-46161—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.3%CVE-2021-46162—A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains an out of bounds write pastEPSS 1.3%CVE-2024-12248CRITICALOut-of-bounds Write vulnerability in Contec Health CMS8000 Patient MonitorEPSS 1.3%