Weaknesses of type CWE-787

5,145 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2022-40866CRITICALTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSeEPSS 1.1%CVE-2022-40868CRITICALTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDeEPSS 1.1%CVE-2022-40853CRITICALTenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_setEPSS 1.1%CVE-2022-40854CRITICALTenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_setEPSS 1.1%CVE-2022-40860CRITICALTenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetEPSS 1.1%CVE-2022-40867CRITICALTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPEPSS 1.1%CVE-2021-32969HIGHDelta Electronics DIAScreen - Type Confusion, Out-of-bounds WriteEPSS 1.1%CVE-2022-44193CRITICALNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminuteEPSS 1.1%CVE-2022-44190CRITICALNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.EPSS 1.1%CVE-2022-44187CRITICALNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.EPSS 1.1%CVE-2022-44186CRITICALNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.EPSS 1.1%CVE-2022-44197CRITICALNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.EPSS 1.1%CVE-2022-44191CRITICALNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.EPSS 1.1%CVE-2022-44188CRITICALNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering.EPSS 1.1%CVE-2022-44196CRITICALNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.EPSS 1.1%CVE-2022-41742HIGHNGINX ngx_http_mp4_module vulnerability CVE-2022-41742EPSS 1.1%CVE-2021-43612HIGHIn lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via shEPSS 1.1%CVE-2021-20987HIGHHilscher: EtherNet/IP stack crash for specific CIP serviceEPSS 1.1%CVE-2024-47615HIGHGHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxerEPSS 1.1%CVE-2021-26623HIGHBandisoft ARK Library Out-of-bound VulnerabilityEPSS 1.1%