Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-79019CRITICALOut of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrarEPSS 0.5%CVE-2025-5269HIGHMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11EPSS 0.5%CVE-2026-43815HIGHA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TahoeEPSS 0.5%CVE-2026-17691CRITICALOut of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox eEPSS 0.5%CVE-2023-3090HIGHOut-of-bounds write in Linux kernel's ipvlan network driverEPSS 0.5%CVE-2026-68579HIGHFreeRDP before 3.30.0 Heap Overflow via CliprdrStream_ReadEPSS 0.5%CVE-2026-31970HIGHHTSlib BGZF index file reader has a heap buffer overflowEPSS 0.5%CVE-2025-32405HIGHAn Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by EPSS 0.5%CVE-2025-57812LOW[BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`EPSS 0.5%CVE-2026-84444HIGHlibheif uncompressed tiled image encoding allows out-of-bounds writeEPSS 0.5%CVE-2026-73193CRITICALDBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparseEPSS 0.5%CVE-2024-22268HIGHVMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrEPSS 0.5%CVE-2026-17272HIGHIBM i is Affected By a Denial of Service in HTTP Server []EPSS 0.5%CVE-2022-46322HIGHSome smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptioEPSS 0.5%CVE-2026-7372CRITICALGeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerabilityEPSS 0.5%CVE-2025-10920HIGHGIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-86882MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOSEPSS 0.5%CVE-2021-3695—A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heaEPSS 0.5%CVE-2026-57021MEDIUMJunos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crashEPSS 0.5%CVE-2026-59087HIGHGimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocationEPSS 0.5%