Weaknesses of type CWE-788

147 results

Acesso de memória além do limite do buffer

Ocorre quando o código tenta ler ou escrever em um endereço de memória que fica além do espaço alocado para uma estrutura de dados (array, string, struct). O programa não valida se o índice ou o ponteiro está dentro dos limites, causando leitura de dados arbitrários ou corrupção de memória adjacente.

Example

Um buffer de 100 bytes é alocado, mas o código acessa o índice 150 sem checar. Isso pode expor dados sensíveis da memória (variáveis de outras estruturas, credenciais) ou causar crash da aplicação. Comum em parsers de formatos e manipulação de strings em C/C++.

How to mitigate

Sempre validar índices e offsets antes de acessar: usar `if (index < buffer_size)` ou funções seguras (`strncpy`, `snprintf`). Em linguagens como Rust e Python, o bounds-checking é automático. Para C/C++, considerar instrumentação (AddressSanitizer) e revisão de código em operações com buffers.

CVE-2020-9731HIGHOut-of-bounds memory access could lead to code executionEPSS 11.3%CVE-2021-21105HIGHAdobe Illustrator memory corruption vulnerability could lead to remote code executionEPSS 5.9%CVE-2021-21104HIGHAdobe Illustrator memory corruption vulnerability could lead to remote code executionEPSS 4.9%CVE-2021-21082HIGHAdobe Photoshop Memory CorruptionEPSS 4.5%CVE-2019-8280—UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.EPSS 4.2%CVE-2021-21093HIGHAdobe Bridge SGI File Parsing Memory Corruption vulnerability could lead to arbitrary code executionEPSS 3.9%CVE-2021-21092HIGHAdobe Bridge DCM File Parsing Memory Corruption could lead to arbitrary code executionEPSS 3.9%CVE-2021-45067MEDIUMAdobe Acrobat Reader Memory Corruption could lead to Information DisclosureEPSS 3.9%CVE-2020-27738MEDIUMA vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <EPSS 3.7%CVE-2021-21103MEDIUMAdobe Illustrator memory corruption vulnerability could lead to information disclosureEPSS 3.3%CVE-2021-36052HIGHXMPToolkit SDK ImportTIFF_CheckStandardMapping Memory CorruptionEPSS 3.2%CVE-2019-8265—UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client codeEPSS 3.1%CVE-2019-8264—UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execEPSS 3.1%CVE-2020-9727HIGHOut-of-bounds memory access could lead to code executionEPSS 3.1%CVE-2021-36070HIGHAdobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code ExecutionEPSS 3.0%CVE-2021-36009HIGHAdobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.0%CVE-2021-44179HIGHAdobe Dimension GIF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.0%CVE-2021-35997HIGHAdobe Premiere Pro Memory Corruption Remote Code Execution VulnerabilityEPSS 2.9%CVE-2019-8266—UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer functEPSS 2.8%CVE-2020-24413HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%