Weaknesses of type CWE-788

147 results

Acesso de memória além do limite do buffer

Ocorre quando o código tenta ler ou escrever em um endereço de memória que fica além do espaço alocado para uma estrutura de dados (array, string, struct). O programa não valida se o índice ou o ponteiro está dentro dos limites, causando leitura de dados arbitrários ou corrupção de memória adjacente.

Example

Um buffer de 100 bytes é alocado, mas o código acessa o índice 150 sem checar. Isso pode expor dados sensíveis da memória (variáveis de outras estruturas, credenciais) ou causar crash da aplicação. Comum em parsers de formatos e manipulação de strings em C/C++.

How to mitigate

Sempre validar índices e offsets antes de acessar: usar `if (index < buffer_size)` ou funções seguras (`strncpy`, `snprintf`). Em linguagens como Rust e Python, o bounds-checking é automático. Para C/C++, considerar instrumentação (AddressSanitizer) e revisão de código em operações com buffers.

CVE-2021-40777HIGHAdobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40734HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.7%CVE-2021-36077MEDIUMAdobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of ServiceEPSS 1.7%CVE-2021-43015HIGHAdobe InCopy GIF File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40793HIGHAdobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40794HIGHAdobe Premiere Pro MOV file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40700HIGHAdobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40765HIGHAdobe Character Animator Memory Corruption could lead to Arbitrary code executionEPSS 1.7%CVE-2021-40764HIGHAdobe Character Animator Memory Corruption could lead to Arbitrary code executionEPSS 1.7%CVE-2021-40786HIGHAdobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40787HIGHAdobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40763HIGHAdobe Character Animator Memory Corruption could lead to Arbitrary code executionEPSS 1.7%CVE-2021-42526HIGHAdobe Premiere Elements WAV file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.6%CVE-2021-40727HIGHAdobe InDesign crashes when parsing the TIF fileEPSS 1.5%CVE-2021-40741MEDIUMAdobe Audition Memory Corruption could lead to Application denial-of-serviceEPSS 1.3%CVE-2021-25661HIGHA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 UpdatEPSS 1.1%CVE-2021-40767MEDIUMAdobe Character Animator Memory Corruption could lead to Application denial-of-serviceEPSS 1.1%CVE-2021-25660HIGHA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 UpdatEPSS 1.0%CVE-2022-0521MEDIUMAccess of Memory Location After End of Buffer in radareorg/radare2EPSS 1.0%CVE-2022-1451HIGHOut-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2EPSS 0.8%