Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-64739HIGHAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 anEPSS 0.5%CVE-2022-2601HIGHA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glEPSS 0.5%CVE-2026-6071HIGHCode Execution Vulnerability in Arena®EPSS 0.5%CVE-2026-6785HIGHMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150EPSS 0.5%CVE-2026-64355CRITICALbpf: Reject fragmented frames in devmapEPSS 0.5%CVE-2023-45681HIGHOut of bounds heap buffer write in stb_vorbisEPSS 0.5%CVE-2022-41902HIGHOut of bounds write in grappler in TensorflowEPSS 0.5%CVE-2024-9121HIGHInappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds meEPSS 0.5%CVE-2026-111280HIGHsnap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadAreaEPSS 0.5%CVE-2024-5875HIGHIrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-93866CRITICALFireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteEPSS 0.5%CVE-2024-5877HIGHIrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-5874HIGHIrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2022-32827MEDIUMA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able EPSS 0.5%CVE-2026-27853MEDIUMOut-of-bounds write when rewriting large DNS packetsEPSS 0.5%CVE-2026-10849HIGHHeap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response bodyEPSS 0.5%CVE-2023-42753HIGHKernel: netfilter: potential slab-out-of-bound access due to integer underflowEPSS 0.5%CVE-2025-1744CRITICALOut-of-bounds Write in radare2EPSS 0.5%CVE-2024-56426HIGHAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2EPSS 0.5%CVE-2026-2922HIGHGStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%