Weaknesses of type CWE-787

5,846 results

Escrita fora dos limites da memória

Ocorre quando o código escreve dados em um endereço de memória fora do intervalo alocado para uma estrutura (array, buffer, objeto). O programa não valida o tamanho ou índice antes de escrever, permitindo sobrescrever memória adjacente — causando corrupção de dados, queda da aplicação ou execução arbitrária de código.

Example

Um formulário web que copia o valor de um campo do usuário para um buffer de 64 bytes sem verificar o comprimento: se o atacante enviar 200 caracteres, a escrita invade a memória vizinha e pode sobrescrever um ponteiro de função ou variável crítica.

How to mitigate

Sempre validar tamanhos de entrada antes de copiar (usar `strncpy` em vez de `strcpy`, ou bibliotecas seguras como `bounds-checking`); usar linguagens com verificação automática de limites (Java, Rust); aplicar testes de fuzzing e análise estática de código para detectar escritas desprotegidas.

CVE-2021-27623MEDIUMSAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sEPSS 0.9%CVE-2024-22662CRITICALTOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRulesEPSS 0.9%CVE-2022-37903HIGHA vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web intEPSS 0.9%CVE-2024-22660CRITICALTOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfgEPSS 0.9%CVE-2022-35056MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478.EPSS 0.9%CVE-2022-35048MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c.EPSS 0.9%CVE-2026-96235HIGH.NET Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-24821HIGHRIOT-OS vulnerable to Integer Underflow during defragmentationEPSS 0.9%CVE-2020-7853MEDIUMTOBESOFT XPLATFORM Out-of-Bounds Read/Write VulnerabilitiesEPSS 0.9%CVE-2023-24820HIGHRIOT-OS vulnerable to Integer Underflow during IPHC receiveEPSS 0.9%CVE-2026-97762HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-2923HIGHGStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-92158HIGHF´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds WriteEPSS 0.9%CVE-2023-33671CRITICALTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.EPSS 0.9%CVE-2022-37453HIGHAn issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and EPSS 0.9%CVE-2021-22791MEDIUMA CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating thEPSS 0.9%CVE-2021-22751—A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of iEPSS 0.9%CVE-2022-45979HIGHTenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set .EPSS 0.9%CVE-2022-35053MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f.EPSS 0.9%CVE-2022-35058MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce.EPSS 0.9%