Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2024-43688HIGHcron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE:EPSS 0.5%CVE-2026-30754HIGHA memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264EPSS 0.5%CVE-2023-35788HIGHAn issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write inEPSS 0.5%CVE-2026-96746HIGHHeap buffer overflow via mid-scan command list growth in client topology monitoringEPSS 0.5%CVE-2026-25986MEDIUMImageMagick has a heap buffer overflow in YUV 4:2:2 decoderEPSS 0.5%CVE-2025-43349LOWAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOEPSS 0.5%CVE-2023-45677HIGHHeap buffer out of bounds write in start_decoder in stb_vorbisEPSS 0.5%CVE-2026-84539CRITICALAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. AEPSS 0.5%CVE-2026-77544HIGHA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exEPSS 0.5%CVE-2025-44014HIGHQsync CentralEPSS 0.5%CVE-2025-25901HIGHA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/EPSS 0.5%CVE-2025-25897HIGHA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vuEPSS 0.5%CVE-2026-57188HIGHAsterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingEPSS 0.5%CVE-2025-25898HIGHA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vEPSS 0.5%CVE-2026-124001CRITICALION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGREPSS 0.5%CVE-2021-47719HIGHCNC_Ctrl DllUnregisterServer f5501 Access ViolationEPSS 0.5%CVE-2024-6821HIGHIrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-23606HIGHMemory safety bugs fixed in Firefox 109EPSS 0.5%CVE-2026-28956MEDIUMA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.EPSS 0.5%CVE-2025-41649HIGHWeidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet SwitchesEPSS 0.5%