Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2025-1744CRITICALOut-of-bounds Write in radare2EPSS 0.5%CVE-2026-3086HIGHGStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-20501HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%CVE-2024-20499HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%CVE-2023-45676HIGHMulti-byte write heap buffer overflow in start_decoder in stb_vorbisEPSS 0.5%CVE-2026-6679HIGHDTLS 1.3 ACK serialization heap buffer overflow via integer truncationEPSS 0.5%CVE-2026-32636MEDIUMImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crashEPSS 0.5%CVE-2024-36114HIGHDecompressors can crash the JVM and leak memory content in AircompressorEPSS 0.5%CVE-2024-53699LOWQTS, QuTS heroEPSS 0.5%CVE-2026-121952CRITICALFreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 CapabilityEPSS 0.5%CVE-2024-38638LOWQTS, QuTS heroEPSS 0.5%CVE-2024-53697LOWQTS, QuTS heroEPSS 0.5%CVE-2026-19642MEDIUMOut-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppEPSS 0.5%CVE-2024-22254HIGHOut-of-bounds write vulnerabilityEPSS 0.5%CVE-2026-71263CRITICALFreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()EPSS 0.5%CVE-2026-34588HIGHOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteEPSS 0.5%CVE-2026-3548HIGHBuffer overflow in CRL number parsing in wolfSSLEPSS 0.5%CVE-2023-38118HIGHFoxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-20357MEDIUMA vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an EPSS 0.5%CVE-2026-6786HIGHMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150EPSS 0.5%