Fallos del tipo CWE-787

5860 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2024-1557HIGHMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.6%CVE-2026-93857CRITICALFireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionEPSS 0.6%CVE-2024-27228CRITICALthere is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional executionEPSS 0.6%CVE-2023-3633HIGHOut of Bounds Memory Corruption Issue in CEVA EngineEPSS 0.6%CVE-2022-0511HIGHMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla FuzzEPSS 0.6%CVE-2022-22752HIGHMozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence EPSS 0.6%CVE-2022-46690HIGHAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13EPSS 0.6%CVE-2022-28288HIGHMozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present iEPSS 0.6%CVE-2024-23124HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2026-71254CRITICALnanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()EPSS 0.6%CVE-2026-59147CRITICALData::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_findEPSS 0.6%CVE-2026-116570HIGHFreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationEPSS 0.6%CVE-2024-42986HIGHTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulEPSS 0.6%CVE-2026-27648HIGHweb_webview has an out-of-bounds write vulnerabilityEPSS 0.6%CVE-2024-42977HIGHTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerabilitEPSS 0.6%CVE-2026-112633MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.6%CVE-2024-50854HIGHTenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.EPSS 0.6%CVE-2026-112646MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.6%CVE-2024-6137HIGHBT: Classic: SDP OOB access in get_att_search_listEPSS 0.5%CVE-2021-3489HIGHLinux kernel eBPF RINGBUF map oversized allocationEPSS 0.5%