Weaknesses of type CWE-788

147 results

Acesso de memória além do limite do buffer

Ocorre quando o código tenta ler ou escrever em um endereço de memória que fica além do espaço alocado para uma estrutura de dados (array, string, struct). O programa não valida se o índice ou o ponteiro está dentro dos limites, causando leitura de dados arbitrários ou corrupção de memória adjacente.

Example

Um buffer de 100 bytes é alocado, mas o código acessa o índice 150 sem checar. Isso pode expor dados sensíveis da memória (variáveis de outras estruturas, credenciais) ou causar crash da aplicação. Comum em parsers de formatos e manipulação de strings em C/C++.

How to mitigate

Sempre validar índices e offsets antes de acessar: usar `if (index < buffer_size)` ou funções seguras (`strncpy`, `snprintf`). Em linguagens como Rust e Python, o bounds-checking é automático. Para C/C++, considerar instrumentação (AddressSanitizer) e revisão de código em operações com buffers.

CVE-2020-24414HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%CVE-2020-24413HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%CVE-2020-24412HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%CVE-2020-9730HIGHOut-of-bounds memory access could lead to code executionEPSS 2.7%CVE-2020-9729HIGHOut-of-bounds memory access could lead to code executionEPSS 2.7%CVE-2020-9728HIGHOut-of-bounds memory access could lead to code executionEPSS 2.7%CVE-2021-36049HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36059HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36068HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36067HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36078HIGHAdobe Bridge PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 2.7%CVE-2021-36069HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36076HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-39817HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-39816HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2020-24415HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.7%CVE-2021-40733HIGHAdobe Animate Memory Corruption Could Lead To Arbitrary Code ExecutionEPSS 2.6%CVE-2021-27384CRITICALA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 UpdatEPSS 2.6%CVE-2021-42267HIGHAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.5%CVE-2021-36046HIGHXMP Toolkit SDK TIFF_MemoryReader::SortIFD function Memory CorruptionEPSS 2.5%