Weaknesses of type CWE-788

147 results

Acesso de memória além do limite do buffer

Ocorre quando o código tenta ler ou escrever em um endereço de memória que fica além do espaço alocado para uma estrutura de dados (array, string, struct). O programa não valida se o índice ou o ponteiro está dentro dos limites, causando leitura de dados arbitrários ou corrupção de memória adjacente.

Example

Um buffer de 100 bytes é alocado, mas o código acessa o índice 150 sem checar. Isso pode expor dados sensíveis da memória (variáveis de outras estruturas, credenciais) ou causar crash da aplicação. Comum em parsers de formatos e manipulação de strings em C/C++.

How to mitigate

Sempre validar índices e offsets antes de acessar: usar `if (index < buffer_size)` ou funções seguras (`strncpy`, `snprintf`). Em linguagens como Rust e Python, o bounds-checking é automático. Para C/C++, considerar instrumentação (AddressSanitizer) e revisão de código em operações com buffers.

CVE-2020-9731HIGHOut-of-bounds memory access could lead to code executionEPSS 11.3%CVE-2021-21105HIGHAdobe Illustrator memory corruption vulnerability could lead to remote code executionEPSS 8.0%CVE-2021-21104HIGHAdobe Illustrator memory corruption vulnerability could lead to remote code executionEPSS 6.6%CVE-2021-21082HIGHAdobe Photoshop Memory CorruptionEPSS 4.6%CVE-2021-21103MEDIUMAdobe Illustrator memory corruption vulnerability could lead to information disclosureEPSS 4.5%CVE-2019-8280—UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.EPSS 4.2%CVE-2021-21093HIGHAdobe Bridge SGI File Parsing Memory Corruption vulnerability could lead to arbitrary code executionEPSS 4.1%CVE-2021-21092HIGHAdobe Bridge DCM File Parsing Memory Corruption could lead to arbitrary code executionEPSS 4.1%CVE-2021-36070HIGHAdobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code ExecutionEPSS 4.1%CVE-2021-35997HIGHAdobe Premiere Pro Memory Corruption Remote Code Execution VulnerabilityEPSS 3.9%CVE-2021-36059HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-36049HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-36068HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-36067HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-36069HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-36076HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-36078HIGHAdobe Bridge PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.7%CVE-2021-39817HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2021-39816HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 3.7%CVE-2020-27738MEDIUMA vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <EPSS 3.7%