Fallos del tipo CWE-787

5860 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-58592HIGHLadybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM IntegrationEPSS 0.5%CVE-2026-27703HIGHRIOT has an Out-of-Bounds Write in nanoCoAP HandlerEPSS 0.5%CVE-2026-16706HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.5%CVE-2026-16887HIGHIBM i is Affected By A Denial of Service Vulnerability DST/SST []EPSS 0.5%CVE-2021-34947HIGHNETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-57876HIGHGV-LPC2011/LPC2211 - unauthorized out-of-bounds writing vulnerability (onvif.cgi)EPSS 0.5%CVE-2026-95115HIGHBuffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parserEPSS 0.5%CVE-2026-112415MEDIUMAn out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOEPSS 0.5%CVE-2026-42370CRITICALGeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerabilityEPSS 0.5%CVE-2026-17425HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.5%CVE-2026-16982HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.5%CVE-2026-17470MEDIUMIBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]EPSS 0.5%CVE-2026-18846HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.5%CVE-2025-64406MEDIUMApache OpenOffice: Possible memory corruption during CSV importEPSS 0.5%CVE-2024-5302HIGHKofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18077HIGHIBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer ProtocolEPSS 0.5%CVE-2021-3713—An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device useEPSS 0.5%CVE-2024-5303HIGHKofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-17120MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.5%CVE-2024-6812HIGHIrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%