Fallos del tipo CWE-787

5860 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2024-6811HIGHIrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-28177HIGHMemory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.5%CVE-2026-19314HIGHFireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)EPSS 0.5%CVE-2026-78011HIGHFireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)EPSS 0.5%CVE-2022-23561HIGHOut of bounds write in TFLiteEPSS 0.5%CVE-2024-24959HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24956HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24958HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24954HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2026-78010HIGHFireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of ServiceEPSS 0.5%CVE-2025-20725HIGHIn ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, ifEPSS 0.5%CVE-2018-16847HIGHAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvEPSS 0.5%CVE-2025-1020CRITICALMemory safety bugs fixed in Firefox 135 and Thunderbird 135EPSS 0.5%CVE-2026-54410HIGHnanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length FieldEPSS 0.5%CVE-2022-25596HIGHASUS RT-AC86U - Heap-based buffer overflowEPSS 0.5%CVE-2022-23973HIGHASUS RT-AX56U - Stack overflewEPSS 0.5%CVE-2026-82071HIGHInsufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds WriteEPSS 0.5%CVE-2021-47774HIGHKingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)EPSS 0.5%CVE-2022-22088CRITICALInteger Overflow to Buffer Overflow in Bluetooth HOSTEPSS 0.5%CVE-2023-21054HIGHIn EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lEPSS 0.5%