Weaknesses of type CWE-788

147 results

Acesso de memória além do limite do buffer

Ocorre quando o código tenta ler ou escrever em um endereço de memória que fica além do espaço alocado para uma estrutura de dados (array, string, struct). O programa não valida se o índice ou o ponteiro está dentro dos limites, causando leitura de dados arbitrários ou corrupção de memória adjacente.

Example

Um buffer de 100 bytes é alocado, mas o código acessa o índice 150 sem checar. Isso pode expor dados sensíveis da memória (variáveis de outras estruturas, credenciais) ou causar crash da aplicação. Comum em parsers de formatos e manipulação de strings em C/C++.

How to mitigate

Sempre validar índices e offsets antes de acessar: usar `if (index < buffer_size)` ou funções seguras (`strncpy`, `snprintf`). Em linguagens como Rust e Python, o bounds-checking é automático. Para C/C++, considerar instrumentação (AddressSanitizer) e revisão de código em operações com buffers.

CVE-2021-40736HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-40772HIGHAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.8%CVE-2021-40771HIGHAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.8%CVE-2021-40775HIGHAdobe Prelude SVG File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.8%CVE-2021-42729HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-42730HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-42724HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-39824HIGHAdobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.8%CVE-2021-40739HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-40738HIGHAdobe Audition WAV file Memory corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-40740HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-42737HIGHAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40770HIGHAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.7%CVE-2021-39819HIGHAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-39818HIGHAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-42527HIGHAdobe Premiere Elements PSD file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40703HIGHAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40702HIGHAdobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40701HIGHAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40792HIGHAdobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%