Weaknesses of type CWE-787

5,145 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2022-35064MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_memset.EPSS 1.0%CVE-2022-35039MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0.EPSS 1.0%CVE-2022-35063MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8.EPSS 1.0%CVE-2022-35038MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d.EPSS 1.0%CVE-2026-91097HIGHHP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesEPSS 1.0%CVE-2026-63072HIGHHeap Buffer Overflow in CMS Key UnwrappingEPSS 1.0%CVE-2021-20225—A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer bEPSS 1.0%CVE-2024-23214HIGHMultiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.EPSS 1.0%CVE-2022-29917CRITICALMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in FirefoxEPSS 1.0%CVE-2023-24170CRITICALTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat.EPSS 1.0%CVE-2023-24167CRITICALTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.EPSS 1.0%CVE-2023-24165CRITICALTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.EPSS 1.0%CVE-2023-24164CRITICALTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.EPSS 1.0%CVE-2022-26730HIGHA memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is EPSS 1.0%CVE-2022-41415CRITICALAcer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows atEPSS 1.0%CVE-2020-23258HIGHAn issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.EPSS 1.0%CVE-2022-30176HIGHAzure RTOS GUIX Studio Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-23088CRITICALBuffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via thEPSS 1.0%CVE-2022-34748—A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write paEPSS 1.0%CVE-2026-42370CRITICALGeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerabilityEPSS 1.0%