Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-103634MEDIUMApache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketchEPSS 0.5%CVE-2026-112522MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.5%CVE-2023-51569HIGHKofax Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-10879CRITICALDBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 bindersEPSS 0.5%CVE-2020-21723—A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remoteEPSS 0.5%CVE-2021-3696—A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap EPSS 0.5%CVE-2025-2750MEDIUMOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds writeEPSS 0.5%CVE-2024-23969HIGHChargePoint Home Flex wlanchnllst Out-Of-Bounds WriteEPSS 0.5%CVE-2023-39485HIGHPDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-0054HIGHOut-of-bounds Write in vim/vimEPSS 0.5%CVE-2024-41879HIGHRE: New Edge T5 MSRC Case [DCMSFT-1294]EPSS 0.5%CVE-2026-79188CRITICALOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsideEPSS 0.5%CVE-2026-79127HIGHOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandboxEPSS 0.5%CVE-2026-6507HIGHDnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processingEPSS 0.5%CVE-2026-79131CRITICALOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandboxEPSS 0.5%CVE-2024-23120HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.5%CVE-2025-62818CRITICALAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380,EPSS 0.5%CVE-2026-17264MEDIUMMedixant RadiAnt DICOM Out-of-bounds writeEPSS 0.5%CVE-2026-57199LOWAsterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffersEPSS 0.5%CVE-2026-45770HIGHSuricata lua: excessive flow variable registration can bypass sandboxEPSS 0.5%